Seccomp lab finally made the syscall spreadsheet feel actionable.
Stefan
Containers · Clinic
Runtime Hardening Clinic
Tighten pod security, seccomp profiles, and syscall awareness without turning lectures into fear tactics.
4 weeks
Informational price: JPY 110,000 · no checkout here
Clinic format mixes micro-labs and mentor critiques. You leave with a hardening checklist mapped to your own workloads (redacted).
Responsible mentor
Imani Brooks
Kubernetes reviewer with secure-storage integration experience.
What the syllabus includes
- Pod security standards mapping lab
- Seccomp profile drafting exercises
- Capability drop drills
- Image provenance discussion prompts
- Peer review of two workload manifests
- Office hour on admission webhook patterns
- Checklist export for internal audits
Outcomes you can evidence
- Prioritize three runtime controls for a given workload
- Explain syscall trimming tradeoffs to security peers
- Pair checklist items with observability probes
Frequently asked angles
No. It complements real operations work; exams are your own timeline.