[Yandex Cloud documentation](../../index.md) > [Yandex Security Deck](../index.md) > [Concepts](index.md) > Kubernetes® Security Posture Management (KSPM)

# Kubernetes® Security Posture Management (KSPM)

[Kubernetes® Security Posture Management (KSPM)](kspm.md) ensures the security of containerized applications.

The KSPM module automatically identifies all Kubernetes clusters and containers in a given [workspace](workspace.md) and deploys security components in them as per the configuration. New clusters automatically get security coverage, without requiring manual search or installation of any components.

The module continuously assesses workloads for misconfigurations and provides runtime security monitoring through sensors that detect attacks targeting nodes and containers.

The KSPM configuration is set when you [create](../operations/workspaces/create.md) a workspace and may include checking clusters for compliance with the following standards:

* ![cspm-standard-k8s-restricted](../../_assets/security-deck/cspm-standard-k8s-restricted.svg) Kubernetes Pod Security Standards (Restricted): This standard contains security controls based on the [Kubernetes Pod Security Standards (PSS) Restricted profile](https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted). A restricted profile is the most secure and provides the highest detection efficiency for container-based attacks. It applies strict security policies that may require modifying applications to ensure compliance. A restricted profile is recommended for security-critical applications and environments where maximum security is required.
* ![cspm-standard-k8s-baseline](../../_assets/security-deck/cspm-standard-k8s-baseline.svg) Kubernetes Pod Security Standards (Baseline): This standard contains security controls based on the [Kubernetes Pod Security Standards (PSS) Baseline profile](https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline). A baseline profile is designed for easy implementation and provides common best practices for container security. It prevents the most common security issues in containers while maintaining compatibility with most applications. The baseline profile is a good starting point for organizations just getting started with container security.
* ![cspm-standard-k8s-ms](../../_assets/security-deck/cspm-standard-k8s-ms.svg) Microsoft Threat Matrix for Kubernetes: This standard contains security controls based on the [Microsoft Threat Matrix for Kubernetes](https://www.microsoft.com/en-us/security/blog/2020/04/02/attack-matrix-kubernetes/), which is a framework that helps security teams understand and fend off threats specific to Kubernetes environments. It provides a comprehensive approach to attack methods and defensive strategies tailored for container orchestration platforms.
* ![cspm-cis-k8s-standard](../../_assets/security-deck/cspm-cis-k8s-standard.svg) CIS Kubernetes Benchmark: This standard contains [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes) recommendations for secure configuration of components on Kubernetes worker nodes. It includes only the automated checks from the `4 Worker Nodes` section.

KSPM allows you to flexibly select and customize security rules to meet your organization's specific requirements and create exceptions from the rules.

For each security rule violation, an [alert](alerts.md) is created with a detailed description of the violation, severity, detection time, list of affected resources and troubleshooting recommendations.

You can manage troubleshooting for each specific alert:
* Assign persons responsible for troubleshooting.
* Manage the alert status.
* Leave comments.
* Keep track of troubleshooting progress.
* Request analysis from the [AI assistant](ai-assistant.md).

For more information, see [Activating the module KSPM](../operations/kspm/enable-kspm.md).

### Useful links {#see-also}

* [Security Deck workspaces](workspace.md)
* [Cloud Security Posture Management (CSPM)](cspm.md)
* [Security Deck AI assistant](ai-assistant.md)
* [Getting started with Yandex Security Deck](../quickstart-overview.md)
* [Activating the module KSPM](../operations/kspm/enable-kspm.md)
* [Kubernetes® Security Posture Management (KSPM) service roles](../security/kspm-roles.md)