Cloud Infrastructure Security

netflix/security_monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

shopify/kubeaudit

kubeaudit helps you audit your Kubernetes clusters against common security controls

nccgroup/scout2

Security auditing tool for AWS environments

openclarity/openclarity

OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure

fit2cloud/riskscanner

RiskScanner 是开源的多云安全合规扫描平台，基于 Cloud Custodian 和 Nuclei 引擎，实现对主流公(私)有云资源的安全合规扫描和漏洞扫描。

octarinesec/kube-scan

kube-scan: Octarine k8s cluster risk assessment tool

mandiant/azure_workshop

Terraform-deployable vulnerable-by-design Azure lab with realistic attack paths and common misconfigurations for practicing red teaming and security…

joshlarsen/aws-recon

Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.

fluidattacks/makes

A software supply chain framework powered by Nix.

azuread/azure-ad-incident-response-powershell-module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in…

skyscanner/lambdaguard

AWS Serverless Security

warhorse/warhorse

Infrastructure Automation

opencspm/opencspm

Open Cloud Security Posture Management Engine

wavestone-cdt/abaddon

Red team operations management platform automating infrastructure deployment, C2 setup, phishing campaigns, and reconnaissance with integrated tool…

netwrix/pingcastlecloud

Audit program for AzureAD

salesforce/metabadger

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

csandker/azure-accesspermissions

PowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…