Expert service
Containers are easy. Securing them is not.
We review your clusters, images and the pipeline that builds them, so one compromised pod does not become a compromised cluster.
Why teams book this test
- Your cluster grew fast.A platform built in a sprint deserves a review before it holds customer data.
- One pod, whole cluster.Find the path from a single compromised pod to your secrets.
- An audit is coming.Reports your ISO 27001 or SOC 2 auditor can use as evidence.
What we test
- RBAC and service account permissions
- Pod security settings and privileged workloads
- Secrets handling
- Network policies and ingress
- Image vulnerabilities and base images
- Registry and CI/CD pipeline security
How an engagement runs
- ScopeA free 30-minute call. Targets, rules, dates.
- TestHands-on, to the agreed method.
- VerifyEvery finding confirmed with evidence.
- ReportImpact and a clear fix for each one.
- RetestWe check what you fixed.
Repeat every release or quarter, starting again from scope.
Why experts
What you receive
A human tests intent, chains attacks and signs the report as an independent third party. That is what the platform alone cannot give you.
- An executive summary written for leadership and customers
- Every finding with evidence, CVSS 3.1 score, impact and a fix your team can follow
- An independent third-party report. Reports your ISO 27001 or SOC 2 auditor can use as evidence.
- Retesting of fixed findings, agreed in the quote
- A walkthrough call with your team
The usual pentest, minus the usual pain.
Typical pentest firm
- PriceDay rates that grow with the job
- FindingsScanner output with your logo on it
- Follow-upBilled as a new engagement
- HandoverA PDF in your inbox
- Next yearStart again from zero
Cerberon experts
- PriceA fixed quote after a 30-minute call
- FindingsEvery finding backed by evidence, with what to fix
- Follow-upRetest or follow-up agreed in your quote
- HandoverA walkthrough call with your team
- Next yearKeep testing on your own server with the Cerberon platform
Questions about this service
Do you support managed Kubernetes?
Yes, including EKS, AKS and GKE, as well as self-managed clusters.
Do you review container images too?
Yes. We review base images, packages and build settings, and the registry and pipeline that produce them.
Tell us what you need tested.
A 30-minute scoping call, then a fixed quote.