About
Securing Kafka so engineers can sleep at night.
KafkaGuard was built by Kafka practitioners who needed this tool and could not find it. Every check in the scanner maps to a real finding from a real cluster — not a theoretical risk.
54 controls. Three compliance frameworks. Agentless. No data leaves your network. Runs in under 90 seconds.
54
Security controls
3
Compliance frameworks
Kafka 2.6–4.x
Kafka version support
4
Output formats
Timeline
Apr 2026
v2.0.0 — First public release. 54 security controls across authentication, authorization, encryption, reliability, and operational categories.
Apr 2026
v2.1.0 — Kafka 4.x KRaft support. ZooKeeper controls auto-skip on KRaft clusters. Confluent Platform 7.x–8.x detection.
Apr 2026
v2.3.0 — Slack / Teams / webhook alerting, multi-cluster trend dashboard, PDF sign-off page, report regeneration from stored scans.
Built by practitioners
KafkaGuard is built and maintained by Kafka engineers. We run Kafka in production, we write the policies, and we eat our own dog food on every release. If you have a finding to report, a check to suggest, or a compliance requirement we haven't mapped yet — reach out.