The Kubernetes UI that runs from a single binary.
Topology, events, Helm, GitOps, image inspection, cluster audits, and MCP for AI agents - all in one open-source binary. Runs on your laptop or in your cluster. No SaaS account required.
The features people install Radar for.
Every capability below ships in the open-source binary. Pick one and read the page that convinced people to run the tool.
Live topology graph
Every resource and connection, laid out by ELK.js and pushed via SSE. Groups by namespace or label.
Event timeline
Every K8s event and resource delta captured the instant it fires - held past the API server's 1-hour TTL.
Image filesystem viewer
Browse any container image's filesystem - tree, sizes, symlinks, search, download - without kubectl exec.
Cluster audit
31 best-practice checks across security, reliability, efficiency. Runs against cached state in milliseconds.
AI via MCP
13 purpose-built read tools + 5 scoped write tools. Pre-built topology, correlated timelines, deduplicated events, minified output - not a dumb pipe for kubectl.
Six more, built into the same binary.
No plugins, no bolt-ons. Auto-discovered when present, off when you don't want them.
Resource browser
Browse every workload, stream logs, exec into pods, edit YAML, port-forward. Auto-discovers any CRD via dynamic informers.
Helm release manager
Every release, every revision, every values file. Roll back, diff revisions, view history. No `helm` CLI required.
GitOps (FluxCD + ArgoCD)
Both controllers, one UI. Sync state, app-of-apps trees, suspend/resume, reconciliation triggers, managed-resource inventory.
Traffic visualization
Auto-detects Hubble (Cilium), Caretta, or Istio. Animated flow graphs with RPS, namespace + protocol filters, status-code analysis.
Cost insights (OpenCost)
Per-namespace, per-workload, per-node cost breakdown. Auto-detected when OpenCost metrics show up in Prometheus. Zero extra config.
30+ ecosystem CRDs
Karpenter, KEDA, cert-manager, Trivy, Velero, External Secrets, CloudNativePG, Knative, Gateway API, Istio, Traefik, Kyverno - native. Plus any CRD you have.
Local or in-cluster. Always airgap-ready.
Same binary on your laptop or in your cluster. No telemetry, no phone-home, no licensing check. All cluster data stays in your cluster.
kubectl radarSingle native binary. Reads your kubeconfig, opens the browser, watches the cluster via SharedInformers and pushes deltas over SSE. No daemon, no installer, no docker.
helm installSame binary, deployed in-cluster for shared team access. OIDC or proxy auth (Google, Okta, Dex, Keycloak, oauth2-proxy, Pomerium, Cloudflare Access). Per-user K8s RBAC via impersonation.
Zero outbound calls. Works on disconnected, regulated, and government clusters where outbound traffic is policy-blocked. Apache 2.0, audit every line yourself.
Built like a CLI tool, not a desktop app.
Three engineering decisions that show up in cold-start time, big-cluster scale, and footprint.
Compiled binary, not a Chromium + JavaScript runtime bundled into a 500MB desktop app. Lower memory footprint, faster cold start, no per-laptop installer or auto-updater. The browser UI is served from the binary.
Same SharedInformer pattern Kubernetes controllers use. List once, watch deltas forever. No periodic full scans, no rate-limit pressure on big clusters, no UI lag while waiting for the next poll.
Cluster deltas land in your browser the instant they fire, via Server-Sent Events. No polling loop, no “click refresh,” no stale state. SSE survives corporate proxies and re-establishes on disconnect.
Radar Cloud adds the things only useful at fleet scale.
Same OSS engine, hosted by us. Multi-cluster fleet view, persistent history, enterprise SSO, routed alerts.
Multi-cluster fleet view
Every connected cluster across EKS, GKE, AKS, and on-prem in one signed-in app. Cross-cluster search, fleet checks, package drift, and topology as the fleet view gets richer.
Long-term retention
Event timeline persisted up to 1 year. Audit log retention. Post-mortem replay with shareable deep-links that survive restarts.
Enterprise auth
SAML and OIDC SSO on every plan; SCIM directory sync on Enterprise. Workspace-scoped roles. Audit log of every privileged action.
Routed alerts
Slack, PagerDuty, MS Teams, webhooks. Per-cluster routing, in-app inbox, suppression windows. Triggered by event correlations, not raw signal.
What's already in your stack.
Plus 30+ Kubernetes ecosystem CRDs auto-discovered: Karpenter, KEDA, cert-manager, Trivy, Velero, External Secrets, CloudNativePG, Knative, Gateway API, Kyverno, Sealed Secrets ...
Bring your first cluster online in 60 seconds.
Install the Helm chart, paste a token, see your cluster. No credit card required.
Apache 2.0 · Self-host forever · Cloud for fleet, alerts, SSO