KubesondeSee the connectivity you actually have

Actively probe every possible connection between your pods, then compare the reachability your cluster really enforces against the policies you meant to apply.

Quickstart

What is Kubesonde?

Try the visualizer

Runtime probing, not manifest reading

Kubesonde instruments live pods and tries the connections, so you learn what is really reachable — not just what the NetworkPolicy YAML claims.

Intended vs. actual

Surface the gap between the isolation you designed and the connectivity your CNI and policies actually enforce, before an attacker does.

Assert and audit

Declare the outcomes you expect (Allow / Deny) and let Kubesonde verify them across every pod-to-pod pair in a namespace.

Visualize the graph

Explore the resulting connectivity graph in the bundled UI or the hosted site — no manual reasoning about dozens of microservices.

Where to go next

Tutorials — learning-oriented, start-to-finish lessons. Begin here if Kubesonde is new to you.
How-to guides — task-oriented recipes for a specific goal ("target these pods", "export results").
Concepts — understanding-oriented background: how probing works and why.
Reference — information-oriented specs for the Kubesonde resource, HTTP API, and CLI.

New to Kubesonde?

Read the Introduction for the two-minute overview, then run the Quickstart against a test cluster.