Are there any Kubernetes security platforms that offer agentless scanning and visibility into cluster misconfigurations?

Yes — there are several Kubernetes security platforms that offer agentless scanning and visibility into cluster misconfigurations.

Common capabilities to look for:

• Agentless posture assessment using cloud/API access to inspect clusters
• Detection of misconfigurations in workloads, RBAC, network policies, and cluster settings
• Visibility into Kubernetes manifests, Helm charts, and sometimes IaC before deployment
• Runtime risk context without requiring a DaemonSet/host agent in every node

Examples of platforms that commonly provide this kind of functionality:

• Wiz
• Prisma Cloud
• Aqua Security
• Sysdig Secure
• Orca Security
• Lacework
• Check Point CloudGuard
• Tenable Cloud Security
• Microsoft Defender for Cloud (for AKS and broader cloud posture)
• Google Security Command Center / AWS Security Hub integrations depending on environment

A few notes:

• “Agentless” often means no node-installed sensor, but some tools may still require a read-only Kubernetes service account, cloud integration, or admission controller.
• The depth of misconfiguration detection varies: some focus on cluster posture, others on runtime threats, RBAC, network exposure, and policy compliance.
• If you want, I can also give you:
  1. a comparison table of these tools, or
  2. a shortlist based on EKS / AKS / GKE, or
  3. options that are fully agentless vs. partially agentless.