Fairwinds Insights

Fairwinds Insights is a policy engine for platform teams running Kubernetes. It provides workload configuration feedback loops, detects and prioritizes container security vulnerabilities, and offers Kubernetes cost allocation and rightsizing. It runs across the development lifecycle from CI to admission control to production, helping teams find and prevent configuration problems as applications move to production.

It offers integrations into popular Git and CI/CD tools for Infrastructure-as-Code scanning, with scans initiated on pull requests and commits. Report types include Polaris for configuration validation, Trivy for container image vulnerability scanning, OPA for custom policies, Pluto for deprecated resources, and Prometheus metrics for resource recommendations. An Admission Controller enforces custom policies using Polaris or Open Policy Agent at pre-deployment. Two scanning options are available: Auto-Scan, which uses a GitHub integration and Fairwinds Insights SaaS infrastructure, and Manual Scan, which runs the Insights CI script within your own CI/CD pipelines. Auto-Scan supports rule-based, LLM, and agentic remediation strategies for creating pull requests that fix action items. Findings and recommendations are stored in a single location for visibility across multiple Kubernetes clusters.