https://cybertoolchain.io/tools/kube-bench New releases and features in kube-bench, tracked by The Cyber Toolchain. en Wed, 20 May 2026 09:03:17 GMT https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.5 https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.5 Wed, 20 May 2026 09:03:17 GMT kube-bench v0.15.5 adds CIS benchmark support for k3s 1.9 and GKE 1.9. • Adds k3s-cis-1.9 CIS benchmark checks for auditing k3s clusters against the CIS 1.9 profile. • Adds GKE 1.9 benchmark checks for auditing Google Kubernetes Engine clusters against the gke-1.9 profile. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.0 Fri, 20 Feb 2026 10:17:30 GMT kube-bench v0.15.0 adds CIS Benchmark support for EKS-1.8 and CIS-1.12 Kubernetes controls. • Adds CIS Benchmark for EKS-1.8, enabling compliance checks against the latest Amazon EKS hardening standard. • Adds CIS-1.12 benchmark support for Kubernetes clusters. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.14.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.14.0 Wed, 05 Nov 2025 08:04:56 GMT kube-bench v0.14.0 adds CIS benchmark support for rke2-cis-1.8 • Adds `rke2-cis-1.8` as a new target platform for CIS benchmark checks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.14.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.14.0 Wed, 05 Nov 2025 08:04:46 GMT kube-bench v0.14.0 adds CIS benchmark support for RKE2-CIS-1.8. • Adds CIS benchmark profile for RKE2-CIS-1.8, enabling hardening checks against Rancher Government's RKE2 security standard. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.13.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.13.0 Mon, 29 Sep 2025 11:49:58 GMT kube-bench v0.13.0 adds CIS 1.11, GKE 1.8.0, RH 1.4 and RH 1.8 benchmark support • Adds CIS Kubernetes benchmark v1.11 checks. • Adds CIS benchmark profile for GKE v1.8.0. • Adds Red Hat OpenShift benchmark v1.4 checks. • Adds CIS benchmark checks for Red Hat OpenShift v1.8. • Adds support for a default value on the EKS 1.7 `eventRecordQPS` rule, reducing false positives in default cluster configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.12.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.12.0 Fri, 22 Aug 2025 08:10:36 GMT kube-bench v0.12.0 adds CIS Benchmark support for EKS v1.7. • Adds CIS Benchmark checks for Amazon EKS v1.7 (`eks-v1.7`). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.11.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.11.0 Tue, 17 Jun 2025 09:22:58 GMT kube-bench v0.11.0 adds CIS benchmark support for AKS 1.7. • Adds AKS-1.7 benchmark version, enabling CIS compliance checks against Azure Kubernetes Service 1.7 clusters. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.10.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.10.0 Thu, 16 Jan 2025 04:18:35 GMT kube-bench v0.10.0 adds CIS Kubernetes 1.10 benchmark for k8s v1.28–v1.31 and CIS EKS 1.5.0 support. • Adds CIS Kubernetes CIS-1.10 benchmark covering Kubernetes v1.28 through v1.31. • Adds CIS EKS 1.5.0 benchmark support for Amazon EKS cluster auditing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.9.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.9.0 Fri, 11 Oct 2024 11:11:58 GMT kube-bench v0.9.0 adds GKE 1.6 CIS benchmark, overhauled K3s scans, and expanded EKS kubelet config coverage. • Adds GKE 1.6 CIS benchmark support for GCP environments. • Overhauls K3s scan checks for improved accuracy and coverage. • Extends the default kubelet config file list to cover AWS EKS nodes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.7.0 https://github.com/aquasecurity/kube-bench/releases/tag/v0.7.0 Tue, 19 Dec 2023 07:19:59 GMT kubernetes tooling now checks Rancher RKE/RKE2/K3s distributions and CIS v1.8.0 • Adds CIS Benchmarks support for Rancher Distributions including RKE, RKE2, and K3s • Adds support for the `CIS Kubernetes Benchmark v1.8.0` specification Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.15 https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.15 Tue, 06 Jun 2023 14:50:53 GMT kube-bench v0.6.15 adds CIS benchmark coverage for EKS v1.2.0, Tanzu TKGI v1.2.53, and K8s v1.7.0. • `--benchmark e1_2_0` enables scanning against the new CIS Amazon EKS Benchmark v1.2.0 • `--benchmark tkgi_1_2_53` enables scanning against VMware Tanzu (TKGI) Benchmarks v1.2.53 • `--benchmark cis-1.7` enables scanning against the general CIS Kubernetes Benchmark v1.7.0 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.11 https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.11 Sun, 05 Feb 2023 09:56:16 GMT Adds `--datadir` flag to specify custom etcd data directories for CIS benchmark checks in kube-bench v0.6.11 • Adds support for the `--datadir` flag allowing users to specify custom data directory locations for etcd when running CIS benchmark checks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.10 https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.10 Sun, 16 Oct 2022 07:14:04 GMT kube-bench v0.6.10 adds EKS Benchmark v1.1.0 and K3s CIS-1.6 support • `eks-stig-kubernetes-v1r6` benchmark added for checking compliance against the EKS STIG standard. • `cis-amazon-eks-1.1.0` benchmark now supported to scan EKS clusters against the latest CIS benchmark. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.9 https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.9 Wed, 10 Aug 2022 17:54:34 GMT Adds support for CIS-1.23 1.0.0 and ppc64le architecture • Adds CIS-1.23 1.0.0 benchmark support for Kubernetes cluster assessments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.8 https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.8 Sun, 24 Apr 2022 10:56:36 GMT Adds CIS-1.23 1.0.0 benchmark support to kube-bench • `Add support to CIS-1.23 1.0.0` enables scanning Kubernetes clusters against the new CIS Benchmark version 1.0.0. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.7 https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.7 Sun, 03 Apr 2022 11:34:57 GMT Adds support for new CPU architectures (ppc64le and s390x) to the kube-bench binary. • Adds `s390x` architecture build • Adding support for new cpu architecture (`ppc64le`) Breaking changes: • Removes `Master` and `Node` subcommands Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.6 https://github.com/aquasecurity/kube-bench/releases/tag/v0.6.6 Wed, 12 Jan 2022 12:52:36 GMT Adds support for Talos, Yandex Managed Kubernetes, GKE 1.2.0, EKS 1.0.1, and arm64 • Add various paths as used by Talos • Support CIS Google Kubernetes Engine (GKE) Benchmark v1.2.0 • Support CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.0.1 • Support Yandex Managed Service for Kubernetes • Support arm64 architecture • Allow for usage of env var `K8S_HOST` in psql Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kube-bench