#1Tools for auditing configurations, permissions, and services in cloud platforms (IaaS, PaaS).
Kitploit recommended
aquasecurity/trivy-plugin-aquaPlugin for integrating Trivy with Aqua Security platform to scan IaC, pipelines, and dependencies for vulnerabilities and misconfigurations.
batfish/pybatfishPython client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior…
cachethq/cachet🚦 Cachet, the open source, self-hosted status page system.
nserser/lr-webpkiReference implementation of LR+ post-quantum authentication over WebPKI CA context, with corpus pipeline, reconstruction, evaluation, and provenance…
davidcoles/vc5A horizontally scalable Direct Server Return layer 4 load balancer for Linux using XDP/eBPF
nihal799/zttpZero-trust SSH bastion proxy with Vault-backed key management, RBAC policy enforcement, full session recording, and admin TUI for auditable access to…
guilherme-grimm/graph-gosimply nodes and graphs
roxanne_ardary/aureaAurea is an open-source, AI-powered platform that secures infrastructure-as-code (IaC) across Terraform, Kubernetes, Docker, and Ansible. It…
kubernetes-sigs/aws-iam-authenticatorA tool to use AWS IAM credentials to authenticate to a Kubernetes cluster
owasp/owasp-top-10-ai-infrastructure-security-risksA practical framework identifying and prioritizing the top security risks in AI datacenter infrastructure, covering hardware, networking, management…
dev-sec/chef-ssh-hardeningThis chef cookbook provides secure ssh-client and ssh-server configurations.
bishopfox/cve-2026-58073-checkSafely detect Veeam Service Provider Console auth bypass CVE-2026-58073
alegrey91/vex8sSuppress vulnerabilities applying Kubernetes context to scans
litmuschaos/litmusCloud-native chaos engineering platform for Kubernetes with fault injection, workflow orchestration, and steady-state validation to surface system…
gduma-phdata/patch-cve-2026-15502Patch: SSRF leading to RCE (Microsoft Exchange Server)
barun121/cve-2024-9264-in-grafana-11.xVulnerability Exploitation using tools Penetration Testing, Grafana, Docker, Kali Linux.
zeroecco/holosDeclarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…
nagwww/s3-leaksCurated timeline of AWS S3 bucket misconfigurations, exposed data, and leaked IAM credentials, with incident links for cloud security defenders and…
