Ephemera

Ephemera is a read-only Kubernetes security audit tool that delivers a complete posture and compliance report in minutes, without agents, persistent access, or data retention.

It runs short-lived, read-only audits using either a lightweight CLI or a cluster dump, then generates a clear, prioritised report covering misconfigurations, risks, and compliance gaps. the audit is complete, all data is automatically deleted by design after 24 hours.

Ephemera is built for teams that need fast, on-demand audits without giving a SaaS platform access to their cluster.

Key features:

• Agentless & read-only: no installation, no changes to your cluster
• Zero retention: audit data is automatically deleted soon after completion
• Fast results: most audits complete in minutes
• Region-pinned processing: data stays within your selected region
• Simple workflow: run via CLI or upload a cluster snapshot

Ephemera sits between open-source scanners like kube-bench and Trivy, and full platforms like Wiz, focusing on quick,-off audits with minimal overhead.