Aegis

AEGIS — See what your AI agents are doing Your agents have access. You deserve visibility. AEGIS puts local AI-agent activity in one desktop dashboard. Follow detected Claude Code, Codex, Cursor and other agent processes, investigate sensitive-file observations and network connections, and review...

tetragon

Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...

kubeshark

Network Observability for SREs & AI Agents Live Demo · Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs — cluster-wide packet...

CVE-2025-27591-PoC

CVE-2025-27591-PoC CVE-2025-27591 PoC — Below Local Privilege Escalation This repository contains a Proof of Concept PoC demonstrating the local privilege escalation vulnerability identified as CVE-2025-27591 in Below , a Linux system observability tool. Made for...

Agentic-Evidence

Agentic Evidence Security Evidence and Observability for Agentic AI Agentic Evidence is an OWASP open-source reference project exploring how to collect, correlate, and evaluate security evidence for agentic AI execution. Agent observability can show that an event was logged. A security...

cloud-doctor

cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...

conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

agensic

Know what ran, where, when and who executed it The missing observability layer for AI-powered terminal workflows Signed Provenance Tracked Sessions Git Time Travel Replayable Sessions IDE style Tab Autocomplete Agensic upgrades your existing terminal workflow for the AI era. It is built for...

kestrel

The kernel-level visibility of Falco, with the live UI the kernel-native tools don't ship. Quickstart · Spec · Views · Roadmap Kestrel traces kernel events process exec, file access, network connections with an eBPF agent and streams them to a SvelteKit web app that renders a live activity feed,...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.329 Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting...

Important: Red Hat Security Advisory: Cluster Observability Operator - 1.5

Cluster Observability Operator - 1.5 Cluster Observability Operator 1.5 provides observability capabilities for cloud-native applications running on OpenShift...

Important: Red Hat Security Advisory: Cluster Observability Operator - 1.5

Cluster Observability Operator - 1.5 Cluster Observability Operator 1.5 provides observability capabilities for cloud-native applications running on OpenShift...

CVE-2026-115293

Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...

CVE-2026-115293 Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure

Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...

EUVD-2026-116074

Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...

CVE-2026-115293

Kibana versions 8.10.0–8.19.23 and 9.0.0–9.4.8 / 9.5.0–9.5.5 are vulnerable to CWE-201 (Insertion of Sensitive Information Into Sent Data). In self-managed deployments where credentials are embedded directly in the Elasticsearch host URLs of the Kibana configuration, an authenticated user with pe...

CVE-2026-115293 Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure

Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...

Kibana 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-204)

Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials...

CVE-2026-115293: Elastic Kibana: Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure…

Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana Observability onboarding can lead to disclosure of the credentials that Kibana uses to connect to Elasticsearch. When these credentials are embedded in the Elasticsearch host URLs in the Kibana configuration, an authenticated use...

Kibana 8.10.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 Information Disclosure (ESA-2026-204)

The version of Kibana installed on the remote host is 8.10.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-204 advisory. - Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana...