EphorVulnerability Management for Kubernetes

Self-hosted. Open source. Your data stays yours.

Runtime-Aware Prioritization

Findings are ranked into P0–P3 tiers from what is deployed, exploitable (CISA KEV / FIRST EPSS), and fixable, so the worklist starts with what matters.

How it works

Unified Dashboard

Priority worklist, severity breakdowns, and trend charts across clusters, namespaces, and workloads.

Triage Workflows

Assign, track, and manage vulnerability status with comments and full audit trails.

Flexible Authentication

OAuth2-based auth with RBAC. Works with Keycloak, GitHub, or any oauth2-proxy compatible provider.

Kubernetes Native

Deploy with Helm. Scan workloads automatically. Designed for platform and security teams.

Automated Scanning

CronJob-based scanner discovers workloads and scans container images with Trivy. Findings appear in the dashboard.