Deckhouse Security is a platform that uses proven Open Source tools and best DevSecOps practices to enhance the security of clusters and applications deployed within them. The platform's main features include compliance with CIS Kubernetes Benchmark recommendations, implementation of SELinux for Linux distribution security, and adherence to PCI Security Standards Council recommendations for payment system protection. Deckhouse also offers sophisticated security out-of-the-box, including federated authentication, role-based authorization, advanced network policies, and Kubernetes event auditing.

Other features encompass centralized TLS certificate management, daily scanning of container images for vulnerabilities, and handling of Docker images from the Deckhouse repository. In addition, Deckhouse carefully selects and tests software and ensures robust access privilege hierarchies, strict configuration of component interaction, and thorough monitoring and handling of security vulnerabilities. Deckhouse Security aims to provide a comprehensive and reliable security environment for Kubernetes-based software and systems