1. What is Security Posture Management for? #
Spot misconfigurations and compliance gaps, notably on Kubernetes.
The principle #
Security Posture Management (SPM) assesses your environments' configuration against security standards. For Kubernetes (KSPM), it detects misconfigurations, suggests hardening and flags compliance violations.
2. Key features #
What the app offers.
Overview #
| Feature | Role |
|---|---|
| Standards | One card per standard: pass rate, passed, manual, failed rules |
| Sévérité | From the standard, mapped to Critical, High, Medium, Low |
| Node Configuration Collector | DaemonSet deployed by the Operator to read node configuration |
| Audit | Findings usable as evidence for auditors |
3. Getting started #
First steps.
Step by step #
- Enable KSPM in the DynaKube resource (
spec.kspm). - Choose the standards to assess.
- Open the overview and handle failed critical rules.
- Track the pass rate over time.
Prerequisites #
- Dynatrace Operator; since version 1.9.0, KSPM enables itself on the first deployment of a configured DynaKube.
Node collection. Without the node configuration collector, about 30% of KSPM checks cannot be evaluated.
Sources #
From the official documentation consulted in November 2026: labels and availability change with platform versions.
