k8scan is an open-source Kubernetes security scanner that goes beyond finding misconfigurations. It runs 123+ security checks across 8 categories and correlates findings using its Capability Break Engine to identify attack paths, privilege escalation opportunities, and container escape scenarios. Deploy it as SaaS or run it fully on-premises to keep sensitive cluster data inside your environment.