Mahesh T

Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.

Valid YAML is not safe YAML. KubeGuard is an open-source (Apache-2.0), offline-first Kubernetes security scanner that does three things most tools stop short of.
First, it chains. Instead of dumping a flat list of findings, KubeGuard reasons over your manifests — or a live cluster, read-only — and links weaknesses into a single MITRE ATT&CK-tagged attack path, showing exactly how an internet-facing service becomes cluster-admin in six hops. That chain is what turns a wall of warnings into a story an engineer and an executive both understand.
Second, it writes the cure. One harden command emits a least-privilege baseline — pod security, default-deny NetworkPolicies, scoped RBAC, admission policies — that re-scans to zero findings. Detect, fix, and proof in one loop.
Third, and this is the wedge for this region, it proves posture to the regulators the GCC actually answers to: Saudi NCA ECC-1, NCA Cloud Cybersecurity Controls (CCC-1), SAMA CSF, and UAE IA/NESA ship as data-driven packs, each exported as a self-contained auditor evidence pack (HTML + JSON) that opens on an air-gapped laptop.
Every number is honest — reported as "breached of assessed," with governance controls a scan cannot see declared non-assessable and excluded from the denominator, never a bare "compliant" badge.
The session is a live 10-minute loop: scan a vulnerable payments workload, walk the attack path, show live GCC compliance, harden, and re-prove. Offline, read-only, deterministic, telemetry-free.