Team uses third-party NG2 components (e.g., service mesh sidecar proxies, eBPF modules).

A passing NG2 submission must follow a four-stage process defined by NEBOSH :

Malicious or unvetted eBPF code loaded into kernel via a popular sidecar image.

A Kubernetes cluster running microservices with workload identity federation (no traditional service accounts).

ng2 risk assessment examples
ng2 risk assessment examples