Threat & Exposure

Exposure & Vulnerabilities

External attack surface, risk-based priority, cloud and workload posture, and AI-correlated root causes

Posture findings

Finding	Environment	Resource	Issue	Benchmark	Severity	Status
CSP-221	Private cloud · prod	k8s namespace afcos	Pods run as root	CIS Kubernetes 5.2.6	High	Open
CSP-219	Private cloud · prod	object bucket evidence	Object lock off	dooit baseline	High	Fixed
CSP-214	Private cloud · dev	service account ci-runner	Cluster-admin binding	CIS Kubernetes 5.1.1	Critical	Open
CSP-210	Private cloud · prod	node pool	Runtime alerts on	—	Low	Passed

Open-source path: Prowler and Kubescape for posture, Falco for runtime detection, Trivy for images. Findings feed the correlation agent.