Velero: 180 page titles, 2,794 body matches, zero fingerprints, and a backup tool that holds cluster credentials

Backup tooling occupies an uncomfortable position in a security review. It needs broad access by definition, it runs on a schedule nobody watches, and its output is a copy of everything it protects. Velero is the Kubernetes-native example: an open-source project that backs up cluster resources and persistent volumes to object storage and restores them on demand. ZoomEye measurements taken on 26 October 2026 put its public footprint in perspective.

The three observations

All queries ran against ZoomEye with sub_type="all" and pagesize=1 , so each total describes matched assets rather than retrieved records.

| Query | Matches |

| --- | ---: |

| title="Velero" | 180 |

| http.body="Velero" | 2,794 |

| app="Velero" | 0 |

The title count is small, and small is what the architecture predicts. Velero is a controller inside a cluster, not a web console.…