Security Playgrounds
Remote sandbox environments for learning and experimenting without worrying about setup and cleanup. Run anything on vanilla Linux VMs, get a fresh Docker host or Kubernetes cluster in seconds, publish ports, collaborate via sharing terminal sessions, SSH from the command line, and more.
Tetragon
A 3-in-1 playground (Kubernetes, Docker, and vanilla Linux hosts) to experiment with Tetragon - an eBFP-powered security observability tool.
minT(oolkit)
Don't change anything in your container image and minify it by up to 30x making it secure, too!
OWASP K8s Vulnerable Cluster
This playground presents a k3s cluster that has randomized security vulnerabilities injected based on the OWASP Kubernetes Top 10 list for 2025. Run a scan to find what's wrong, then fix it and get another random vulnerability automatically injected. Play as long as you like!
Vault
Secure, store, and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets, and other sensitive data using a UI, CLI, or HTTP API.
Kind Cluster: Mutating Admission Policies
A playground to demonstrate dynamic admission control through native support for mutating resources during the admission phase through mutating admission policies.
Kind Cluster: Structured AuthN + AuthZ Config
A playground to demonstrate access control through Kubernetes structured authentication and structured authorization configuration.
Kind Cluster: OIDC AuthN
A playground to demonstrate access control through OIDC authentication for Kubernetes.