Secure by Design
Secrets are replaced at the network edge. Your application code never sees real credentials, eliminating accidental exposure.
Zero Latency Impact
eBPF-powered traffic redirection happens in kernel space, adding negligible overhead to your requests.
Kubernetes Native
Works with standard Kubernetes Secrets. Add a label and Kloak handles the rest automatically.
Host Restrictions
Control which secrets can be used with which hosts. Prevent credential misuse with fine-grained access control.
Zero Code Changes
No SDK required. Works with any language or framework. Use the hash placeholder in your config.
Pure eBPF Integration
No bulky sidecars or complex CNI plugins. Kloak operates purely at the kernel level for maximum efficiency.
Open Source
Fully open source under the AGPL-3.0 License. Inspect the code, contribute, and build with confidence.