What Runtimez is
Runtimez is read-only Kubernetes deployment intelligence. It connects to a live cluster with a single Helm command and surfaces upgrade blockers, container-image CVEs, production-readiness gaps, cost waste, and risky workload changes — before they become incidents.
Every finding is scored on two axes, upgrade risk and security risk, then correlated by workload. That correlation is the point: it lets you fix the CVE that also blocks your next Kubernetes upgrade first, rather than working two unranked lists in parallel.
How it works
Section titled “How it works”- Connect your cluster — one read-only Helm command installs the agent.
- Discover & inventory — Runtimez maps every workload, image, and API in use.
- Score & correlate — findings are scored on the upgrade and security axes and correlated by workload.
- Act on what matters — you get a prioritized, cross-axis remediation list, plus a PR-time verdict on every proposed change.
Teams typically get their first production-risk report within an hour of connecting.
What the agent reads — and what it never touches
Section titled “What the agent reads — and what it never touches”| ✓ Reads (metadata) | ✕ Never reads or exfiltrates |
|---|---|
| Workload specs: names, namespaces, labels, owners | Secret values, tokens, private keys |
| Container image references & tags | Environment-variable & ConfigMap values |
| Kubernetes & API versions, deprecated APIs | Application data or database contents |
| Probes, limits, replicas, disruption budgets | Application logs or in-memory data |
| CVE identifiers for the images you run | Anything that would leave your cluster |
Secret values and image contents never leave your cluster. The agent works from metadata and findings. Nothing runs against your cluster until you install it.
- Connect a cluster — the Helm quickstart.
- RBAC & security model — the exact verbs requested.
- Supported platforms — EKS, GKE, AKS.
- The cluster view — every feature tab, one page each.