https://www.kubewarden.io/components/network-enforcer/Recent content in Network Enforcer on KubewardenHugoen-usFri, 13 Nov 2026 14:22:23 +0100https://www.kubewarden.io/blog/2026/11/runtime-enforcer-network-enforcer-join-kubewarden/Fri, 13 Nov 2026 00:00:00 +0000https://www.kubewarden.io/blog/2026/11/runtime-enforcer-network-enforcer-join-kubewarden/<p>The Kubewarden project started in 2021 as an admission controller, focusing on validating and rejecting Kubernetes Resources. Kubewarden pioneered a few novel concepts, including compiling policies into WebAssembly and distributing them as OCI artifacts via OCI registries. Policies can be written in Rust, Go, Rego and CEL, among others. Existing Gatekeeper, OPA and Kubernetes policies can be reused as well.</p> <p>Kubewarden joined the CNCF sandbox in 2022 and has remained a fully open source and vendor neutral admission control framework for Kubernetes. In 2025, Kubewarden expanded beyond pure admission control with the addition of <a href="https://www.kubewarden.io/blog/2025/11/expanding-kubewarden-scope/"><code>SBOMscanner</code></a>. <code>SBOMScanner</code> helps to secure the actual workloads to be deployed and ties into the scope of Kubewarden, securing the cluster by preventing vulnerable and insecure workloads from being deployed.</p>