#1Tools for auditing configurations, permissions, and services in cloud platforms (IaaS, PaaS).
Kitploit recommended
google/gvisorSandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…
stackrox/stackroxThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…
aws/serverless-application-modelTransforms SAM templates into CloudFormation resources, generating Lambda functions, IAM roles, and policies with built-in serverless best practices.
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
spiffe/spireWorkload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…
fairwindsops/polarisValidation of best practices in your Kubernetes clusters
kata-containers/kata-containersKata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…
awslabs/aws-security-assessment-solutionAn AWS tool to help you create a point in time assessment of your AWS account using Prowler.
datadog/stratus-red-team:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
smol-machines/smolvmBranchable computing by using a portable, lightweight, self-contained virtual machine
linnix-os/linnixeBPF-powered Linux observability with AI incident detection. AGPL-3.0 licensed.
openbmc/bmcwebA do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC
warp-tech/warpgateFully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software
kubescape/kubescapeOpen-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
checkmarx/kicsStatic analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
xddxdd/nixos-configLan Tian's NixOS Configuration
