Skip to content
Enterprise-grade Kafka Security

Know your Kafka is secure. In 10 seconds.

40+ automated compliance controls. PCI-DSS, SOC2, ISO 27001 mapping. Audit-ready reports in seconds, not weeks.

kafkaguard — scan
kafkaguard-report.html
KafkaGuard HTML compliance report

Scroll to explore the full compliance report

PCI-DSS 4.0SOC 2 Type IIISO 27001
40+Controls
<10sScan Time
<50MBBinary Size

Why KafkaGuard?

40+ Production-Ready Controls

Comprehensive security, reliability, and operational controls including 15 security controls (SASL, SSL/TLS, ACLs), 12 reliability controls, and 13 operational controls.

4 Report Formats

Generate reports in multiple formats: JSON for automation, HTML for web-viewable reports, PDF for audit-ready reports, and CSV for spreadsheet analysis.

Enterprise Security Support

Full support for SASL authentication (SCRAM, Kerberos), SSL/TLS encryption with certificate validation, and Mutual TLS (mTLS).

Fast and Lightweight

Optimized for speed: scans complete in ~10 seconds. Single static binary under 50MB, memory usage under 200MB.

Compliance Ready

Built-in compliance mappings for PCI-DSS, SOC2, and ISO 27001 with automated remediation guidance.

CI/CD Native

Native GitHub Actions support, structured JSON output for pipelines, and exit codes for automated decision-making.

How It Works

01

Connect

Connect to your Kafka cluster using bootstrap servers and authentication credentials.

02

Evaluate Controls

KafkaGuard evaluates 40+ security, reliability, and operational controls based on your selected policy tier.

03

Generate Reports

Receive comprehensive reports in JSON, HTML, PDF, or CSV format with detailed findings and remediation guidance.

Policy Tiers

baseline-dev

Reliability and operational checks for development clusters.

enterprise-default

Full security, reliability, and operational validation for production.

finance-iso

Advanced compliance controls for regulated industries.

Need more than a CLI? On-Prem Enterprise.

KafkaGuard On-Prem gives you a compliance dashboard, team management, and central scan tracking — fully self-hosted and air-gapped.

KafkaGuard On-Prem — Clusters
KafkaGuard On-Prem compliance dashboard showing cluster overview
Compliance Dashboard

Cluster scores, findings, and scan history at a glance.

Team Management

Role-based access with Admin, Operator, and Read-only roles.

Air-Gapped

Fully offline, no internet required, single installer.

Starting at $4,999/year

Flexible plans for teams of all sizes.

Get started your way

Developers

Download the free CLI and scan your first cluster in 5 minutes.

Download CLI

Enterprise Teams

Self-hosted dashboard with team management, compliance tracking, and air-gapped deployment.

Request a Trial