EphorVulnerability Management for Kubernetes

Self-hosted. Open source. Your data stays yours.

Unified Dashboard

Severity breakdowns, trend charts, and visibility across clusters, namespaces, and workloads.

Assign, track, and manage vulnerability status with comments and full audit trails.

OAuth2-based auth with RBAC. Works with Keycloak, GitHub, or any oauth2-proxy compatible provider.

Deploy with Helm. Scan workloads automatically. Designed for platform and security teams.

CronJob-based scanner discovers workloads and scans container images with Trivy. Findings appear in the dashboard.