Skip to content

FAQ

Can the agent change anything in my cluster?

Section titled “Can the agent change anything in my cluster?”

No. It requests read-only verbs only and is not a mutating or admission webhook. See RBAC & security model.

Do secret values or images leave my cluster?

Section titled “Do secret values or images leave my cluster?”

No. Secret values and image contents never leave your cluster. The agent works from metadata and findings.

Teams typically get their first production-risk report within an hour of connecting.

Read access ends immediately. See Uninstall.

Which Kubernetes distributions are supported?

Section titled “Which Kubernetes distributions are supported?”

EKS, GKE, and AKS. See Supported platforms.