Alternatives

Kyverno alternatives for AI agents.

Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.

Current skill

Kyverno

Unified Policy as Code

100
Quality
100
Trust
7.8K
Stars
#1

Opa

Similarity 125Trust 100Excellent 100

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

12K starsJun 12, 2026 pushsecurityGoCompliance
$ npx skills add open-policy-agent/opa
#2

Cloud Custodian

Similarity 118Trust 100Excellent 100

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

6.0K starsJun 10, 2026 pushsecurityPythonCompliance
$ npx skills add cloud-custodian/cloud-custodian
#3

Wazuh

Similarity 111Trust 100Excellent 100

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

16K starsJun 12, 2026 pushsecurityC++Compliance
$ npx skills add wazuh/wazuh
#4

Lynis

Similarity 111Trust 100Excellent 100

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

16K starsMay 11, 2026 pushsecurityShellCompliance
$ npx skills add CISOfy/lynis
#5

Vuls

Similarity 111Trust 100Excellent 100

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

12K starsJun 5, 2026 pushsecurityGoSecurity
$ npx skills add future-architect/vuls
#6

Kube Score

Similarity 109Trust 100Excellent 100

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

3.1K starsMay 20, 2026 pushsecurityGoSecurity
$ npx skills add zegl/kube-score
#7

Bearer

Similarity 108Trust 100Excellent 100

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

2.7K starsJun 8, 2026 pushsecurityGoSAST
$ npx skills add Bearer/bearer
#8

Semgrep

Similarity 105Trust 100Excellent 100

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

15K starsJun 12, 2026 pushsecurityOCamlSAST
$ npx skills add semgrep/semgrep
#9

Photon

Similarity 105Trust 100Excellent 100

Incredibly fast crawler designed for OSINT.

13K starsFeb 10, 2026 pushsecurityPythonOSINT
$ npx skills add s0md3v/Photon
#10

Crucix

Similarity 105Trust 100Excellent 100

Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.

10K starsMay 20, 2026 pushsecurityJavaScriptOSINT
$ npx skills add calesthio/Crucix
#11

Wpscan

Similarity 105Trust 100Excellent 100

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

9.6K starsJun 4, 2026 pushsecurityRubySecurity
$ npx skills add wpscanteam/wpscan
#12

Nuclei

Similarity 105Trust 100Excellent 100

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

29K starsJun 4, 2026 pushsecurityGoSecurity
$ npx skills add projectdiscovery/nuclei
#13

Bandit

Similarity 104Trust 100Excellent 100

Bandit is a tool designed to find common security issues in Python code.

8.1K starsMay 25, 2026 pushsecurityPythonSecurity
$ npx skills add PyCQA/bandit
#14

Maigret

Similarity 99Trust 100Excellent 100

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

33K starsJun 11, 2026 pushsecurityPythonOSINT
$ npx skills add soxoj/maigret
#15

Zaproxy

Similarity 97Trust 100Excellent 100

The ZAP by Checkmarx Core project

15K starsJun 4, 2026 pushsecurityJavaSecurity
$ npx skills add zaproxy/zaproxy
#16

Instaloader

Similarity 97Trust 100Excellent 100

Download pictures (or videos) along with their captions and other metadata from Instagram.

13K starsApr 15, 2026 pushsecurityPythonOSINT
$ npx skills add instaloader/instaloader

How to choose

When should you switch?

Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Kyverno if it already passes your workflow test and repository review.

Next step

Compare top candidates side by side

Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.