Security insights

Cast AI provides two security insight features that help you maintain a strong security posture across your Kubernetes clusters. Both features are powered by Kvisor and can be enabled under Settings > Security insights in your cluster view. No additional installation is required.

Vulnerabilities

The Vulnerabilities page identifies all container images currently running in your cluster and the CVEs they may expose. It consolidates data from individual image registries, third-party Helm charts, and other deployment methods into a single view. Images are scanned automatically when new running images are detected, by default every 30 seconds.

Each image is scored by severity using CVSS, and you can filter by cluster, namespace, severity level, or resource label to focus on what matters. Detected vulnerabilities can be remediated automatically using the Fix container image vulnerabilities APA runbook.

Compliance

The Compliance page evaluates your Kubernetes environment against the Cast AI security benchmark. Checks run continuously (every 60 seconds by default) and cover misconfigurations, RBAC issues, and kubelet/system-component settings validated via kube-bench.

Each finding includes a severity score (CVSS v3.1), a description of the check, the number of affected resources, and step-by-step remediation instructions. You can manage exceptions for resources that represent accepted risks.