Cloud Infrastructure Security

nestybox/sysbox

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

hashicorp/boundary

Boundary enables identity-based access management for dynamic infrastructure.

checkmarx/kics

Static analysis scanner for infrastructure-as-code that detects security vulnerabilities, compliance violations, and misconfigurations across…

duo-labs/cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

open-policy-agent/conftest

Write tests against structured configuration data using the Open Policy Agent Rego query language

fairwindsops/polaris

Validation of best practices in your Kubernetes clusters

getanteon/anteon

eBPF-powered Kubernetes monitoring and performance testing platform that automatically generates service maps, tracks real-time metrics, and runs…

usmannasir/cyberpanel

Cyber Panel - The hosting control panel for OpenLiteSpeed

datadog/stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

kubernetes-sigs/aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

bishopfox/cloudfox

Automating situational awareness for cloud penetration tests.

ine-labs/awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

aquasecurity/kube-hunter

Hunt for security weaknesses in Kubernetes clusters

pry0cc/axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf,…

salesforce/cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

microsoft/whatthehack

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …