Velero (formerly Heptio Ark) gives you tools to back up and restore your Kubernetes cluster resources and persistent volumes. You can run Velero with a public cloud platform or on-premises.
Falco is a Linux security tool that uses system calls to secure and monitor a system. Falco is the de facto Kubernetes threat detection engine and provides security from the Linux kernel onwards.
Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker). Clair detects vulnerabilities in images and notifies the developer.
Istio is an open platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio’s control plane provides an abstraction layer over the underlying cluster management platform, such as Kubernetes.