The runtime-based vulnerability prioritization has been the biggest improvement for us.

Instead of a flat CVE list per image, ARMO shows which vulnerable packages are actually

loaded and in use at runtime, which cut the list we have to act on down to something a

small team can realistically handle. The eBPF sensor gives that visibility without us

having to change our deployments or add sidecars.

We also get a lot of value out of the generated network policies and the way ARMO builds

them from observed traffic rather than asking us to write them from scratch — it turns

network segmentation from a project into a review step. Compliance reporting against

frameworks like NSA-CISA and CIS has been useful for demonstrating posture to customers

without maintaining our own spreadsheets.

Onboarding remains genuinely fast: a single Helm install per cluster, and the Slack

integration keeps new findings visible in the channels the team already works in. The

combination of posture, vulnerability and runtime data in one platform means we're not

stitching together three tools to answer one question. Review collected by and hosted on G2.com.

Multi-cluster reporting. Once you're running more than a handful of clusters, the

per-cluster views are strong but the roll-up across all of them is thinner. A single

trend view — "is our overall exposure going up or down this quarter" — would help a lot

when reporting to management.

Documentation for the less common paths. The happy-path setup is well documented; the

edges — custom control tuning, exceptions at scale, CI integration in less common

pipelines — take more trial and error than they should. Review collected by and hosted on G2.com.

ARMO Platform has truly transformed the security posture of our Kubernetes application clusters. As a cybersecurity professional integrating new solutions for mission-critical environments, I’ve found ARMO’s detection and remediation capabilities for vulnerabilities and misconfigurations far superior to traditional tools. Its real-time compliance monitoring, user-friendly dashboards, and broad compatibility with existing CI/CD pipelines let us quickly identify issues and automate fixes—saving hours on manual security checks. The visualization of risk posture, along with actionable recommendations, is invaluable for both technical teams and executive reporting. Review collected by and hosted on G2.com.

Like any robust security solution, ARMO Platform’s breadth of features means there’s an initial learning curve—especially for less-experienced Kubernetes users. Some advanced features require additional configuration to get the most value, and deeper integration with third-party ticketing or SIEM systems would further streamline incident response. Review collected by and hosted on G2.com.

I recently integrated ArmoSec with one of our staging Kubernetes clusters using their SaaS-based portal. The onboarding was very smooth — I was able to connect the cluster and start getting real-time security insights within 20–30 minutes. What stood out the most was the RBAC misconfiguration detection, which gave us a clear view of over-permissioned service accounts.

The attack path visualization helped us understand potential lateral movement risks. The UI is intuitive, and their remediation suggestions are practical — they don’t just show you what’s wrong, but guide you to fix it step-by-step. For someone working in DevSecOps, this is a really handy dashboard. Review collected by and hosted on G2.com.

One area that could be improved is the alerting system — I’d love to see more customizable alerts or Slack integration to monitor specific risk thresholds. Also, the scan reports are comprehensive but export options (PDF, CSV) felt a bit limited during our testing phase. It’s not a blocker, but something that could enhance usability. Review collected by and hosted on G2.com.

CADR is an innovative approach that felt like a missing piece in the traditional security Review collected by and hosted on G2.com.

Even though the platform does complete cloud security, it is not properly reflected in the docs. Review collected by and hosted on G2.com.

I recently started using ARMO, (which uses Kubescape), it is very simple to get started and covers various compliance needs, besides I like the attack paths, CVE etc. Compared to other products in the market, it is priced reasonably and works very well with any cloud provider. You need ARMO if you have set Kubernetes cluster on the cloud, to verify the configurations, remove various security issues, and identify various compliance violations. Once these are fixed, it is easy for SOC2 or other compliance. ARMO also has a remediation option against each issue, which is kind of nice, and helps to pinpoint what additional controls to add to the YAML files. Review collected by and hosted on G2.com.

Overall I like the platform, A few areas that can be improved are, applying a fixed configuration directly from the platform, rather than downloading the yaml and applying it yourself. Besides, there are cases where the docker image you have used has transient dependencies that have open CVEs, but often upgrading to a newer version may not be the correct solution and can cause incompatibility. I feel, if ARMO provides an option to take chainguard or similar images, that would be better, without changing the version. Review collected by and hosted on G2.com.

Armo is perfect for reading kubescape reports. The two tools integrate very well, and the armo dashboard allows you to push the use and understanding of kubescape dashboard to the limit. I also really like the ease with which the various scans (registry, repository, cluster) can be integrated. The interface is very pretty and easy to understand. All useful information is displayed on the screen, and fixes for the various vulnerabilities are easy to copy and apply, which saves an enormous amount of time. The various sorting functions are very practical. I also like the fact that it's easy to accept the risks. Translated with DeepL.com (free version) Review collected by and hosted on G2.com.

I don't like the idea of paying per node. In my case, I have a lot of small nodes with very different uses and resources. It's ideal for me to separate the different services of my project, but from a financial point of view (according to the vision of paying per node) it's very bad. However, I think it's good practice to have more nodes than one giant one. Review collected by and hosted on G2.com.

I am impressed with ARMO Platform’s ability to simplify security operations. My team can spend time on more important matters and an automates many of the repetitive tasks that would have eaten up a lot of our time. We have less time spent troubleshooting since the interface is so clear and brings up security challenges so directly. It does not require constant oversight, and it keeps everything in check, which really helps in maintaining a smooth workflow. Review collected by and hosted on G2.com.

A weakness of ARMO Platform is that there is not enough information provided for the user. As much as the platform is easy to use once one masters it, there are instances when setting up the platform or making modifications, there is a shortage of comprehensive guides. More detailed guidelines or a better orientation would help to avoid the moments when one has to think about how to do it at all. Review collected by and hosted on G2.com.

I enjoy that ARMO Platform helps us manage our projects more efficiently. The dashboard creates a visible summary of project status so personnel will not need to search through many messages or emails. The reporting tool saves us three hours per week because it creates detailed reports instantly with basic commands. The easy method for assigning work and monitoring progress helps us a lot. Review collected by and hosted on G2.com.

ARMO Platform suffers technical problems most often during file uploads of big sizes. The project work stops without warning during your work. ARMO stops working properly at times during file uploads. The system fails to show recent updates sometimes which creates unclear situations for users. A team member may think a task is finished but the system has not yet refreshed the update so team members get confused. Review collected by and hosted on G2.com.

The ARMO Platform has cut our cloud costs for our Intrusion Detection Service (one of our most costly products) by 80%. Review collected by and hosted on G2.com.

ARMO is coming out with many new features. They seem helpful after a demo, but it isn't always clear how we can use them for actionable insights. Review collected by and hosted on G2.com.

The automation features of ARMO Platform stand out as remarkable capabilities. The Platform performs its tasks by reducing hand labor which frees up at least one day of work during each week. The main benefit of the ARMO Platform lies in its capability to integrate with our existing tools. Automation capabilities founded in the ARMO Platform represent an outstanding feature through its capability to gather data from different sources then present it in one unified dashboard. This single feature allows our team to save three hours of reporting work each week. Review collected by and hosted on G2.com.

Users need to spend time adapting to the robust features of the ARMO Platform due to its complex interface structure. I regularly search for specific settings or configurations within the ARMO Platform. A few integration issues between ARMO Platform and our current tools created minor system disruptions. Review collected by and hosted on G2.com.