← Directory

NodeAgent K8s

NodeAgent is a Kubescape runtime security agent based on extended Berkeley Packet Filter (eBPF) that monitors Kubernetes container behavior at kernel level to…

  • Tools & Utilities
NodeAgent is a Kubescape runtime security agent based on extended Berkeley Packet Filter (eBPF) that monitors Kubernetes container behavior at kernel level to detect and prevent threats in real time.

Platform availability

Available on 0 of 6 install platforms

  • Unraid (not listed)
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm (not listed)

Also on Docker Hub and GitHub

Health score

59/100 Fair

Maintained
100last commit 12 days ago
Popular
3238 GitHub stars
Easy to install
100 install platforms, Docker image
Light to run
No data

Based on 3 of 4 factors.

How is this calculated?

A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). Factors without data are left out and the rest are rescaled.

GitHub stars
38
Open issues
18
Last commit
2026-09-28
Latest release
v0.3.249
License
Apache-2.0
Activity
declining

Checked 11 days ago - source: GitHub (kubescape/node-agent)

Resources & Compatibility

ARM (e.g. Raspberry Pi) is not supported.

Checked 11 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Install Deploy NodeAgent as part of the Kubescape platform on each Kubernetes node; it uses eBPF to observe container behavior at kernel level. source

Fetched today - each note links to its source

Alternatives (10)

  • Anytxt Desktop Search
  • DocFetcher - DocFetcher is an Open Source desktop search application: It allows you to search the contents of files on your computer.
  • Everything - Locate files and folders by filename on Windows instantly, displaying all items on NTFS volumes and mapped network drives.
  • FSearch - FSearch is a fast file search utility for GNU/Linux operating systems, inspired by Everything Search Engine.
  • FileLocator
  • Hister - Your own search engine
  • SearchMyFiles - SearchMyFiles is a non-indexing portable alternative to the standard "Search For Files And Folders" module of Windows.
  • agent - Agent is a private personal assistant you run on your own hardware.
  • grep
  • ripgrep

Checked 9 days ago - source: AlternativeTo

Common questions

How do I enable NodeAgent runtime detection when installing Kubescape?

Use the Kubescape Helm chart and set capabilities.runtimeDetection=enable and alertCRD.installDefault=true in the kubescape namespace. Then wait for pods labeled app=node-agent to become ready.

How can I watch alerts from NodeAgent after installation?

Run kubectl logs in the kubescape namespace for pods labeled app=node-agent with follow enabled. Alerts appear after the initial learning period completes.

What performance impact does NodeAgent have on Kubernetes nodes?

It uses eBPF for kernel-level monitoring with minimal performance overhead. The README reports around 1 to 2 percent CPU overhead.

What eBPF format does NodeAgent use for its gadgets?

NodeAgent uses image-based gadgets in the Inspektor Gadget image format.

Answers sourced from github.com

Community

Collected 6 days ago - public community threads