CNCF / Linux Foundation
Certified Kubernetes Security Specialist
CKS · active
Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.
- Exam cost
- $445 USD
- Questions · time · passing score
- 120 minutes · Other exam details not verified
- Prerequisites
- Must previously have passed CKA; CKA need not still be active.
- Estimated salary premium
- Not established by comparable evidence
- Renewal requirements
- Not verified in this audit; confirm with issuer.
- Difficulty
- Not rated
Domains covered
- Cluster setup (10%)
- Cluster hardening (15%)
- System hardening (15%)
- Minimize microservice vulnerabilities (20%)
- Supply chain security (20%)
- Monitoring, logging and runtime security (20%)
Where this credential fits
MyCyberPath career mappings are planning guidance, not universal employer requirements.
Compare this certificationRecent catalog changes
- CNCF / Linux Foundationexam update
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Online proctored, performance-based test, administered by PSI.
- After
- Not verified
- CNCF / Linux Foundationupdated
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- https://www.cncf.io/certification/cks/
- After
- https://www.cncf.io/training/certification/cks/
- CNCF / Linux Foundationupdated
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- CNCF / Linux Foundationdomain change
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: skills gained. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- ** Use Network security policies to restrict cluster-level access · Use CIS benchmark to review Kubernetes component security configuration (etcd · kubelet · kubedns · kubeapi) · Properly set up Ingress objects with TLS · Protect node metadata and endpoints · Verify platform binaries before deploying · Use Role Based Access Controls (RBAC) to minimize exposure · Exercise caution in using service accounts (disable defaults · minimize permissions) · Restrict access to Kubernetes API · Upgrade Kubernetes to avoid vulnerabilities · Minimize host OS footprint (reduce attack surface) · Using least-privilege identity and access management · Minimize external access to the network · Appropriately use kernel hardening tools such as AppArmor · seccomp · Use appropriate pod security standards · Manage Kubernetes secrets · Understand and implement isolation techniques (multi-tenancy · sandboxed containers) · Implement Pod-to-Pod encryption (Cilium · Istio) · Minimize base image footprint · Understand your supply chain (e.g. · SBOM · CI/CD · artifact repositories) · Secure your supply chain (permitted registries · sign and validate artifacts) · Perform static analysis of user workloads and container images (e.g. · Kubesec · KubeLinter) · Perform behavioral analytics to detect malicious activities · Detect threats within physical infrastructure · apps · networks · data · users and workloads · Investigate and identify phases of attack and bad actors within the environment · Ensure immutability of containers at runtime · Use Kubernetes audit logs to monitor access · Who It’s For · Kubernetes Administrators · Cloud Security Engineers · DevOps Engineers with a security focus · Professionals seeking to validate advanced Kubernetes security skills · Individuals working in cloud-native security roles
- After
- Cluster setup (10%) · Cluster hardening (15%) · System hardening (15%) · Minimize microservice vulnerabilities (20%) · Supply chain security (20%) · Monitoring, logging and runtime security (20%)
- CNCF / Linux Foundationupdated
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: prerequisites. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- | Must have taken and passed the Certified Kubernetes Administrator (CKA) exam prior to attempting the CKS exam. | | Renewal Period | Every 2 years | | Renewal Fee | Full exam cost ($445) upon retake | | CPE Requirements | Not applicable; renewal by re-taking exam | | Study Hours | 46-50 hours | | Demand | High | |
- After
- Must previously have passed CKA; CKA need not still be active.
- CNCF / Linux Foundationupdated
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: vendor. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- CNCF / Linux Foundationupdated
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Full exam cost ($445) upon retake
- After
- Two-year validity; CARE maintenance option available. Verify current renewal route and fee.
- CNCF / Linux Foundationexam update
Certified Kubernetes Security Specialist
Certified Kubernetes Security Specialist: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 15-20 performance-based tasks, 2 hours time limit, 67% passing score.
- After
- 120 minutes; online proctored command-line performance tasks. Fixed task count not published on the program page.