# Best approach to run AppSec PoC on OpenShift: OneAgent vs Operator?

**URL:** <https://community.dynatrace.com/t/best-approach-to-run-appsec-poc-on-openshift-oneagent-vs-operator/52771>\
**Category:** Container platforms\
**Tags:** openshift, dynatrace-operator\
**Created:** [August 1, 2025, 8:25pm UTC](https://community.dynatrace.com/t/best-approach-to-run-appsec-poc-on-openshift-oneagent-vs-operator/52771 "2025-08-01T20:25:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![NicoleMT](https://avatars.discourse-cdn.com/v4/letter/n/3be4f8/32.png) [@NicoleMT](https://community.dynatrace.com/u/NicoleMT)\
**Post date:** [August 1, 2025, 8:25pm UTC](https://community.dynatrace.com/t/best-approach-to-run-appsec-poc-on-openshift-oneagent-vs-operator/52771/1 "2025-08-01T20:25:49Z")

</div>

Hi Community,  
I’m preparing a **Proof of Concept (PoC)** for a company that wants to monitor the **Application Security (AppSec)** module for their microservices running on **OpenShift**.

My question is: what’s the recommended approach to set up this PoC?  
Should I install the OneAgents directly on the OpenShift **hosts** , or is it better to use the **Dynatrace Operator**?

I’d really appreciate any guidance, best practices, or experiences you can share on how to approach this.

Thanks in advance!

---

<div class="post-metadata">

**Author:** ![Julius\_Loman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/julius_loman/32/51_2.png) [@Julius\_Loman](https://community.dynatrace.com/u/Julius_Loman)\
**Post date:** [August 1, 2025, 8:42pm UTC](https://community.dynatrace.com/t/best-approach-to-run-appsec-poc-on-openshift-oneagent-vs-operator/52771/2 "2025-08-01T20:42:30Z")

</div>

You shall deploy Dynatrace OneAgent in any Kubernetes environment using Dynatrace Operator. No discussion.  
I’d recommend you to get familiar with Kubernetes deployment and AppSec features prior to any PoC and having a deep understanding of how it works.