kguardian

kguardian is a Kubernetes security tool that leverages eBPF to monitor pod traffic and syscalls, automatically generating least-privilege NetworkPolicies and Seccomp profiles based on actual runtime behavior. It includes components like a controller DaemonSet, broker, policy evaluator, CLI plugin, web UI, and an optional AI assistant to facilitate policy creation and auditing, designed for platform and security teams to manage security policies as code without manual rule writing.