Kyverno and its sub-projects follow the security practices published and maintained at https://github.com/kyverno/community/blob/main/SECURITY.md.

For the project threat model, security audits, and hardening guidance, see the Kyverno Security Guide.