Inspektor Gadget: Results from the first security audit

Inspektor Gadget, the CNCF eBPF-based Kubernetes observability toolkit, completed its first independent security audit conducted by Shielder and coordinated by OSTIF. The assessment found three vulnerabilities — two rated Medium and one Low severity — all of which have been patched in released versions. Researchers also provided six hardening recommendations to strengthen the project’s security posture as it matures within the CNCF ecosystem.