Observed arrival · 2026-08-28
Attestkeep keeps Kubernetes admission decisions inside the cluster
A self-hosted Kubernetes operator that scans images, verifies signatures, applies admission policy, and stores the audit trail in infrastructure you control.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
Field notes
The admission webhook receives pod image references, retrieves a verdict by digest from a local cache, and applies policy before allowing or denying the workload. Unknown images are queued for Trivy and cosign rather than scanned during admission, while findings and evidence are stored in user-controlled PostgreSQL. The homepage lists Kubernetes 1.27+ support for amd64 and arm64 and says the Community edition is free forever.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue