Posture scanning is the process of checking a system’s configuration and policy state to find misconfigurations, drift, and compliance gaps. In Kubernetes and other cloud environments, it reviews objects such as clusters, namespaces, roles, network rules, and workload settings against a baseline or security policy.
This matters because many attacks start with a weak setting rather than a software flaw. Overly broad permissions, exposed services, missing encryption, or changes that drift from approved standards can create easy entry points for attackers and make recovery harder. Defenders use posture scanning continuously to spot risky defaults before deployment and to detect when a secure setup becomes unsafe over time. It complements runtime detection: posture scanning shows what is configured badly, while runtime tools show what is happening live.