OSTIF and Quarkslab completed a security audit of Cortex, the CNCF-hosted multi-tenant scalable storage backend for Prometheus and OpenTelemetry. The whitebox audit focused on tenant boundary security and cluster operations, uncovering 7 findings (6 medium, 1 low severity). All findings have been verified and fixed — users should update to the latest Cortex release. The audit also produced custom documentation and recommendations for future security development.
248 Impressions