1. What KubeGauge is
KubeGauge is a Kubernetes security posture scanner. An agent you install reads your cluster through the Kubernetes API with read-only permissions, evaluates a catalogue of checks, and pushes the results to a dashboard that scores and explains them.
It is a tool for finding misconfigurations, and that is the whole of the promise. A passing score is not a statement that your cluster is secure, and nothing KubeGauge produces certifies compliance with any standard or regulation. Mapping findings to frameworks such as CIS, ISO 27001 or PCI DSS is a convenience for your own assessment — it is not an audit, and we are not your auditor.
2. Your account
You need an account to use the dashboard. Keep your credentials and your cluster API keys to yourself: anything done with them counts as done by you. Cluster keys are shown exactly once, when created or rotated, and can be revoked at any time from the dashboard.
You must be old enough to enter a contract where you live, and give an e-mail we can reach.
3. Installing the agent
You install the agent yourself, into clusters you control. You confirm that you are authorised to install software in, and to scan, every cluster you point at KubeGauge. Scanning infrastructure you have no permission to scan is your problem, not ours, and we will cooperate with anyone who reports it.
The agent is separate open-source software, licensed Apache-2.0 at github.com/kubegauge/agent. Your use of the agent's code is governed by that licence, not by these terms. You are free to read it, build it and audit exactly what it does — that is the point of publishing it.
helm uninstall ends collection immediately, and frees the cluster slot on your plan.
4. Plans, limits and billing
Three plans, priced in US dollars and billed monthly:
- Free — $0. One cluster, a daily scan plus three on-demand scans per day, and seven days of history.
- Pro — $29/month. Five clusters, hourly scans, unlimited on-demand scans, ninety days of history, report export and the regulatory framework mappings.
- AI — $79/month. Everything in Pro, plus AI-composed remediation, capped at thirty compositions per day per organization.
Limits are enforced by the API, not by the honour system: a scan interval faster than your plan allows is answered with a rate-limit response, and a cluster beyond your limit is refused rather than silently charged for.
Subscriptions are handled by Stripe. You start, change and cancel them through Stripe's hosted checkout and customer portal, under the terms shown there; changes mid-cycle are prorated by Stripe. If a payment fails, Stripe retries it, and after a grace period the organization returns to Free plan limits.
Downgrading never deletes data. Clusters beyond the new limit stop being scanned and their existing history is kept, subject to the retention window described in the privacy policy.
5. Acceptable use
- Point the agent only at clusters you own or are authorised to scan.
- Do not attack, probe or overload the service, and do not work around the plan limits or the rate limits.
- Do not resell access, or run KubeGauge as a scanning service for third parties without agreeing that with us first.
- Do not use the AI feature to have a model produce something unrelated to your findings.
We may suspend an account that breaks these rules, or one that has stopped paying.
6. AI-composed remediation
Remediation plans are suggestions. The command steps come from our own deterministic templates rather than being invented by a model, but the plan is still an opinion about a cluster we cannot see. Read it before you run it. You are responsible for anything you apply to your own infrastructure, and for the outcome.
Composing with AI sends your selected findings to a third-party provider. That provider is not named yet — see what that step sends in the privacy policy, including how to get remediation plans without it.
7. Availability
We do not currently offer a service level agreement. The service may be unavailable for maintenance, or because a provider we depend on is having a bad day. If the dashboard is down your cluster is unaffected — the agent is outbound-only and holds no inbound port, so a KubeGauge outage cannot take anything of yours with it.
8. Warranty and liability
KubeGauge is provided as is, without warranty of any kind, to the extent permitted by law. We do not warrant that the checks find every misconfiguration, that a finding is always right, or that the service is uninterrupted or error-free.
To the extent permitted by law, our total liability for any claim relating to the service is limited to what you paid us in the twelve months before the claim — which, on the Free plan, is nothing. We are not liable for indirect or consequential loss, including lost profits, lost data or a security incident in your own infrastructure.
9. Ending it
You can stop at any time: uninstall the agents, cancel the subscription in the billing portal. We may end or suspend an account for breach of these terms or for non-payment, and will use the e-mail on the account to say so where we reasonably can.
Deleting a cluster removes its reports and scores. Deleting the account itself is a manual request today — see your choices in the privacy policy.
10. Changes
We may change these terms; the date at the top changes with them, and the page's history is public. If a change materially reduces what you get, it applies from your next billing period — and cancelling before it starts is always an option.
11. Governing law
The governing law and the venue for disputes are among the details still to be published on this page — see the notice at the top. Nothing here waives a right you hold under mandatory consumer law where you live.