menu

arifkurnaz

@arifkurnaz

Arif KURNAZ

Founder of Attestkeep. Container image security for Kubernetes, with the audit e...
Türkiye attestkeep.com Joined October 2026
161 Points • 2 Badges • 0 Connections • 0 Followers • 0 Following
Profile Stats Wall Posts Badges

About

Software developer, building Attestkeep: a Kubernetes admission controller that scans images, verifies signatures, decides at admission and keeps a signed record of every decision ... Show more

Experience

Founder

Attestkeep (Ecavist Technologies)
Mar 2026 - Present

Çanakkale, Türkiye Building Attestkeep, container image security for Kubernetes: image scanning, signing and attestation, policy decisions at admission, Falco runtime events, and signed evidence packages for 13 compliance frameworks. Go backend, Vue 3 console, Helm chart, PostgreSQL.

Java Developer

Keymate.io
Dec 2024 - Feb 2026

Reactive microservices with Quarkus and SmallRye in an event-driven architecture; Keycloak extensions (SPIs) for IAM; Kafka data pipelines with the Outbox pattern; Kubernetes deployments with Helm; OpenTelemetry observability; JUnit 5, Testcontainers and K6 test suites.

Projects

Attestkeep

Visit Project open_in_new Mar 2026 - Present

Kubernetes admission controller that scans, signs and verifies container images, decides at admission, and keeps a signed record of every decision as audit evidence. Runs inside the cluster it protects; every security feature in the free edition.

Portiger

Visit Project open_in_new Mar 2026 - Present

Run your apps on your own servers, without Kubernetes. Gives a small fleet of Docker servers what a cluster would: deploys from Git, automatic TLS, scheduled jobs, encrypted secrets, backups and host security scanning. Installs on one machine, adds nodes over SSH. Go services, Vue 3 UIs.

Language & Tools

Go, Java (Quarkus, Keycloak), PHP, C#, Kubernetes, Docker, Kafka, PostgreSQL, Trivy, cosign, Falco, Helm , Keycloak

Currently Exploring

Falco runtime events as audit evidence, SLSA provenance and VEX at admission time, evidence packages auditors can verify without trusting the vendor.

Achievements

Shipped Attestkeep 1.0 (September 2026), now at 1.3.x: admission control, signed evidence packages for 13 compliance frameworks, Falco integration.

Random Dev Quote

Evidence you can only produce by preparing for the question is not evidence that the control was working.

Top Tags

User Activities

OctNovDecJanFebMarAprMayJunJulAugSep
Mon
Tue
Wed
Thu
Fri
Sat
Sun
Less More

Contributions
Joined: 9 hours (since Oct 23)
Full Name: Arif KURNAZ
Headline: Founder of Attestkeep. Container image security for Kubernetes, with the audit evidence built in.
About: Software developer, building Attestkeep: a Kubernetes admission controller that scans images, verifies signatures, decides at admission and keeps a signed record of every decision for SOC 2, ISO 27001, PCI DSS, DORA, NIS2 and other frameworks. Before that, deployment tooling and B2B backend work in Java (Quarkus, Keycloak extensions), Go, PHP and C#. I write about what a cluster can prove, not what a vendor claims.
Location: Türkiye
Website: https://attestkeep.com
Languges & Tools: Go, Java (Quarkus, Keycloak), PHP, C#, Kubernetes, Docker, Kafka, PostgreSQL, Trivy, cosign, Falco, Helm , Keycloak
Currently Exploring: Falco runtime events as audit evidence, SLSA provenance and VEX at admission time, evidence packages auditors can verify without trusting the vendor.
Achievements: Shipped Attestkeep 1.0 (September 2026), now at 1.3.x: admission control, signed evidence packages for 13 compliance frameworks, Falco integration.
Fun Fact:
Random Dev Quote: Evidence you can only produce by preparing for the question is not evidence that the control was working.
Latest Video:
chevron_left

Active in these Groups:

CoderLegion Changelog
244 members
DevOps
599 members
Java
297 members