Kubernetes security mechanisms protect you against container-based attacks. These attacks often occur by hackers exploiting vulnerabilities in container base images or even 3rd party libraries. It could also be due to cluster misconfigurations that allow malicious activity to go undetected at runtime or cause cloud-native applications to fall out of compliance. As a result, your teams need to embed security and compliance across the Kubernetes lifecycle. Native controls like PodSecurityPolicies help prevent privilege escalation and blocks threats at runtime. Using open-source Falco, you can detect and alert on malicious activity at runtime. A Kubernetes security tool that is part of your DevOps ecosystem can help you manage your cloud security risk.