• Layers environment-specific intelligence to detect operational risks relevant to your classified artifacts
• Prunes changelogs to include only the deltas that affect you
• Composes preflight and postflight checks tailored to your clusters’ topology
• Generates upgrade steps that align with your deployment system, package version, and OCI artifacts

• Analyzes the full dependency graph—cloud control plane / nodes, add-ons, and application services—to expose downstream blast-radius effects.
• Correlates contextualized breaking changes, version drifts, API deprecations, IAM mutations, OS/kernel swaps, and configuration shifts to determine how a change in one component impacts others.
• Pinpoints affected components, and informs the safest remediation and upgrade sequence.

• Detects whether or not an OSS Project needs an upgrade
• Recommends Rapid Source-grounded Next Versions
• Tags Required vs Optional Upgrades

Export the assessment for a Jira ticket, Wikis, Pull Requests or Coding Agents

Export the assessment as a PDF for attaching on tickets or sharing over emails

Enables teams to collaborate within the context of a step in the workflow.

Allows inclusion of steps in the workflow containing logic that is custom to your upgrade process

Logs all actions taken on steps of an Assessment.

• Recommends and preverifies on a Digital Twin the safest next version on a Digital Twin
• Detects whether an upgrade involves single or multiple hops
• Tags required vs optional upgrades based on change reasoning
• Links to authoritative upstream notes for every recommendation

• Curated from Changelogs, Upgrade Guides / Notes, and Official Blogs.
• Contextualized for your environment.

AI agents find issues not mentioned in Changelogs via deep research and by executing the recommended upgrade path on a Digital Twin

Shows information provided by cloud providers about deprecated/removed API usage, control plane EOL, version skew (nodes, kubelet, kube-proxy, etc.)

Inline, annotated diffs show exactly what will change in Helm values, Kustomize overlays, Argo-CD app-sets, or raw YAML, eliminating manual side-by-side reviews and silent drift

Audits RBAC additions or removals so required permissions evolve with every upgrade.

Compares old vs. new CRD schemas and every stored Custom Resource, guiding safe migrations and avoiding validation errors.

Allows inclusion of steps in the workflow containing logic that is custom to your upgrade process

Enables teams to collaborate within the context of a step in the workflow.

Logs all actions taken on steps of an Assessment.

Covers smoke tests, API readiness checks, and end-to-end checks, streams results into the Template workflow.

• Assigns owners, sets actions, tracks lifecycle of each workflow step (completed, in-progress, skipped).
• Manages lifecycle of the upgrade across all clusters in an environment (% completed).

Eliminates any additional work required to log these aspects in wikis or docs post upgrades.

• Includes all Covered Cloud & K8s Distributions.
• Shows cluster Version, Environment, Region and Provider.
• Overlays EOL and Extended Support / LTS information for each cluster

Shows versions of Images, Project Releases, Project Components

Shows Package System (Helm, Kustomize, Kube, Terraform), Package Releases, Package Components

A minimal-permission, read-only IAM role reads cloud account metadata to enable cross-layer risk detection and automated pre/postflight checks

Flags components approaching end-of-life or running known-bad versions the moment upstream publishes them

• Flags any Project that is incompatible with the running K8s version.
• Flags version skew for Nodes and kubelets.
• Flags incompatibilities across Projects--e.g. Istio<>Envoy, Containerd<>CNI, etc.

Notifies 90d earlier that clusters coming close to EKS/GKE Extended Support or AKS LTS will incur 500% more surcharges. Also reminds 1wk before the deadline.

Detects OCI Registry, OCI Repository, OCI Tag, OCI Artifact

Informs Chkk about the original source of every Helm Chart, Kustomize Overlay Directory, or Manifest

Informs Chkk about the original project from which the custom-built image was rebuilt and/or retagged

Detects OCI Registry, OCI Repository, OCI Tag, OCI Artifact

Detects OCI Registry, OCI Repository, OCI Tag, OCI Artifact

Share near-real-time reports with compliance teams that the platform software isn't running any EOL software

Fine-granular control over your entire configuration tree so you can redact any part of the tree that should not be processed by Chkk

All Defects have an associated KBA which provides:

• Affected Resources
• Severity (Critical, High, Medium, Low)
• Impact assessment
• Trigger conditions that activate the risk
• Mitigation (or short-term workaround)
• Remediation (or long-term fix)
• Code snippets for remediations and mitigations, when applicable

All EOL risks have an associated KBA with external sources and affected resources

All Compatibility risks have an associated KBA with external sources and affected resources

All Misconfigurations have an associated KBA which provides:

• Affected Resources
• Severity (Critical, High, Medium, Low)
• Impact assessment
• Trigger conditions that activate the risk
• Mitigation (or short-term workaround)
• Remediation (or long-term fix)
• Code snippets for remediations and mitigations, when applicable

All Deprecations have an associated KBA which provides:

• Affected Resources
• Severity (Critical, High, Medium, Low)
• Impact assessment
• Trigger conditions that activate the risk
• Mitigation (or short-term workaround)
• Remediation (or long-term fix)
• Code snippets for remediations and mitigations, when applicable

All Guardrails have an associated KBA which provides:

• Affected Resources
• Severity (Critical, High, Medium, Low)
• Impact assessment
• Trigger conditions that activate the risk
• Mitigation (or short-term workaround)
• Remediation (or long-term fix)
• Code snippets for remediations and mitigations, when applicable

Risks can be ignored on a per-cluster or per-resource level, from the KBA page or through IaC annotations