StackRadar vs KubeClarity
KubeClarity was an open-source tool for SBOM generation and vulnerability scanning of Kubernetes clusters, with a dashboard and multi-scanner support. The project was archived in October 2024 with no migration path.
Facts last checked . Prices and features change — verify with the vendor before deciding.
What KubeClarity does well
- The closest open-source feature shape to StackRadar: runtime cluster scan, SBOM per image, dashboard.
- Supported multiple scanners and SBOM generators (including Syft and Grype).
- Free and Apache-2.0 while it was maintained.
How KubeClarity and StackRadar differ
The differences are about how the two are built and sold, not a feature checklist. Each point below is a structural fact you can verify on the vendor's own documentation.
- Archived. No security updates, no new Kubernetes API compatibility, no vulnerability-database updates from the project.
- Its successor, OpenClarity, targets VM and cloud asset scanning and does not carry KubeClarity’s Kubernetes-runtime model forward.
- StackRadar is actively maintained, hosted, and re-matches stored SBOMs as advisories land instead of rescanning.
Side by side
| Axis | StackRadar | KubeClarity |
|---|---|---|
| Where it runs | One Helm chart in the cluster, source published; managed dashboard | Self-hosted in the cluster (archived) |
| Kubernetes runtime inventory | Yes — every running image, with its workload, Helm release and ArgoCD application | Yes |
| SBOM | CycloneDX 1.6 per running image (Syft), stored and re-checked as new advisories land | Yes (Syft and others) |
| Prioritisation | Radar Score — CVSS, EPSS and CISA KEV combined in a published formula | CVSS severity |
| History and trends | 30 days (Free), 1 year (Pro), 2 years (Business) | Limited |
| Multi-cluster view | One dashboard across every cluster in the organisation | Per installation |
| Scanner source | Published on GitHub; releases signed and version-pinned | Open source, archived |
| Pricing | Published: Free $0 · Pro $59/mo · Business $199/mo | Free, unmaintained |
| Data residency | EU only; only the SBOM leaves the cluster | Self-hosted |
Pricing
KubeClarity: KubeClarity was free and open source, and the code is still on GitHub. It receives no updates. Any team still running it is carrying an unmaintained security tool, which is a finding in itself.
StackRadar: Free for one cluster with 30 days of history; Pro at $59 per month for up to five clusters and one year of history; Business at $199 per month for up to fifteen clusters and two years. Every plan scans every image you run. Full details on the pricing page.
Which should you choose?
Choose KubeClarity if
- Honestly: you should not start a new deployment on an archived project. If you already run it, plan the migration.
Choose StackRadar if
- You want the same shape — runtime SBOM per image, dashboard, vulnerability tracking — from something maintained.
- You want EPSS and KEV ranking and history across clusters, which KubeClarity never had.
- You want a published price and an auditable scanner instead of an orphaned repo.
Frequently asked questions
Is KubeClarity still maintained?
No. The repository was archived in October 2024. Its successor project, OpenClarity, focuses on VM and cloud asset scanning rather than Kubernetes runtime SBOMs.
What should I migrate to from KubeClarity?
For a free in-cluster scanner, Trivy Operator. For a hosted product with the same runtime-SBOM model plus history, multi-cluster visibility and exploitability ranking, StackRadar — its Free plan covers one cluster.