Shopify Launches Overexposed Kubernetes Scanner

Shopify introduces Overexposed, an internal scanner that locates exposed Kubernetes Ingresses on GKE and Cloud Run services. After rebuilding the tool on GCP Cloud Asset Inventory, the team reduced inconclusive verdicts by around 80% in just a few weeks of tuning. The system uses anonymous HTTP probes to verify access policies and distinguishes between intent and enforcement.