StackRadar vs KubeClarity
KubeClarity was an open-source tool for SBOM generation and vulnerability scanning of Kubernetes clusters, with a dashboard and multi-scanner support. It was deprecated in October 2024 in favour of OpenClarity, and OpenClarity was itself archived in May 2026.
Facts last checked . Prices and features change — verify with the vendor before deciding.
What KubeClarity does well
- The closest open-source feature shape to StackRadar: runtime cluster scan, SBOM per image, dashboard.
- Supported multiple scanners and SBOM generators (including Syft and Grype).
- Free and Apache-2.0 while it was maintained.
How KubeClarity and StackRadar differ
The differences are about how the two are built and sold, not a feature checklist. Each point below is a structural fact you can verify on the vendor's own documentation.
- Archived. No security updates, no new Kubernetes API compatibility, no vulnerability-database updates from the project.
- Its successor is archived too. OpenClarity merged KubeClarity with VMClarity, but existing KubeClarity data could not be migrated — moving meant a fresh install — and in May 2026 OpenClarity was archived and its whole GitHub organisation marked unmaintained.
- StackRadar is actively maintained, hosted, and re-matches stored SBOMs as advisories land instead of rescanning.
Side by side
| Axis | StackRadar | KubeClarity |
|---|---|---|
| Where it runs | One Helm chart in the cluster; self-hosted (AGPL-3.0) or reporting to the cloud dashboard | Self-hosted in the cluster (archived) |
| Kubernetes runtime inventory | Yes — every running image, with its workload, Helm release and ArgoCD application | Yes |
| SBOM | CycloneDX 1.6 per running image (Syft), stored and re-checked as new advisories land | Yes (Syft and others) |
| Prioritisation | Radar Score — CVSS, EPSS and CISA KEV combined in a published formula | CVSS severity |
| History and trends | 1 year (Pro), 2 years (Business); 1 year self-hosted | Limited |
| Multi-cluster view | One cloud dashboard across every cluster in the organisation; self-hosted is one cluster | Per installation |
| Scanner source | Open source: scanner Apache-2.0, server and dashboard AGPL-3.0; releases signed and version-pinned | Open source, archived |
| Pricing | Free to self-host · Cloud: 14-day free trial, then Pro $59/mo · Business $199/mo at beta price ($99 / $299 standard) | Free, unmaintained |
| Data residency | Self-hosted: stays in your cluster. Cloud: EU only, and only the SBOM leaves the cluster | Self-hosted |
Pricing
KubeClarity: KubeClarity was free and open source, and the code is still on GitHub. It receives no updates. Any team still running it is carrying an unmaintained security tool, which is a finding in itself.
StackRadar: Free to self-host for one cluster (AGPL-3.0). The cloud starts with a 14-day free trial; then Pro at $59 per month for up to five clusters and one year of history; Business at $199 per month for up to fifteen clusters and two years. Those are beta prices, for the first 10 Pro and 5 Business subscriptions; after that Pro is $99 and Business $299 a month. Every plan scans every image you run. Full details on the pricing page.
Which should you choose?
Choose KubeClarity if
- Honestly: you should not start a new deployment on an archived project, and its successor OpenClarity is archived too. If you already run either, plan the migration.
Choose StackRadar if
- You want the same shape — runtime SBOM per image, dashboard, vulnerability tracking — from something maintained.
- You want EPSS and KEV ranking and history across clusters, which KubeClarity never had.
- You want a published price and an auditable scanner instead of an orphaned repo.
Frequently asked questions
Is KubeClarity still maintained?
No. KubeClarity was deprecated and its repository archived in October 2024 in favour of OpenClarity, which merged it with VMClarity; existing data could not be migrated, so moving meant a fresh install. OpenClarity was then archived itself in May 2026, and the OpenClarity organisation is marked unmaintained. Neither project receives updates.
What should I migrate to from KubeClarity?
For a free in-cluster scanner, Trivy Operator. For a hosted product with the same runtime-SBOM model plus history, multi-cluster visibility and exploitability ranking, StackRadar — free to self-host for one cluster, or hosted.