Featured project
OWASP Kubernetes Top 10
Led a group of industry experts to update the OWASP Kubernetes Top 10, providing cluster operators with actionable guidance on cluster security.
OWASP Kubernetes Top 10
Rory McCune
I break and secure containers and Kubernetes clusters, then talk and write about what I find. This site keeps the record: talks given, projects led, articles published.
- Talks
- 43
- Speaking since
- 2009
- Projects
- 9
- Articles
- 53
- Tutorials
- 2
Talk log
All 43 talks- 2026 Talk about giving talks video
- What LLMs do and don't know about securing Kubernetes video
- 2025 A Talk about Talks
- Oh what a tangled web we weave when we … network containers!
- So You've Deployed Kubernetes Everywhere, Now What?
- Hacking up a storm with Kubernetes video
- Beyond the surface - exploring attacker persistence strategies in Kubernetes video
- Containers Rule Everything Around Me video
- 2024 Fortifying Kubernetes video
- Charting the Course - The History and Evolution of Kubernetes Security video
Projects
Project details
- Kubernetes admission controller threat model Led creation of a threat model for Kubernetes admission controllers
- Cloud Native Security Book A book on Cloud Native Security
- Cloud Native Security Talks Created a site collecting together over 300 talks on cloud native security.
- Container Security Site A site about container security
- Docker CIS Benchmarks Contribution to the Docker CIS Benchmark
- Kubernetes CIS Benchmarks Contribution to the Kubernetes CIS Benchmark
- PCI container orchestration guidance for Kubernetes Wrote a series of posts explaining the PCI Container orchestration guidance for Kubernetes
- Kubernetes RBAC Good Practice Guide Led creation of a RBAC good practice Guide for the Kubernetes documentation
Writing elsewhere
All 53 articles- Datadog Blog 25
- Kubernetes Blog 1
- TechBeacon 2
- DZone 1
- Aqua Blog 21
- NCC Group Research Blog 3