C-0260 - Missing network policy


ClusterScan, security, WorkloadScan, SOC2



Description of the the issue

This control detects workloads that has no NetworkPolicy configured in labels. If a network policy is not configured, it means that your applications might not have necessary control over the traffic to and from the pods, possibly leading to a security vulnerability.

Related resources

ConfigMap, CronJob, DaemonSet, Deployment, Job, NetworkPolicy, Pod, ReplicaSet, StatefulSet

What does this control test

Check that all workloads has a network policy configured in labels.


Review the workloads identified by this control and assess whether it's necessary to configure a network policy for them.


No example