#1Tools for auditing configurations, permissions, and services in cloud platforms (IaaS, PaaS).
Kitploit recommended
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
powerfulseal/powerfulsealA powerful testing tool for Kubernetes clusters.
natlas/natlasAttack Surface Management since before Attack Surface Management was a thing
nccgroup/pmapperA tool for quickly evaluating IAM permissions in AWS.
controlplaneio/kubesecSecurity risk analysis for Kubernetes resources
openbmc/bmcwebA do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC
nagwww/s3-leaksCurated timeline of AWS S3 bucket misconfigurations, exposed data, and leaked IAM credentials, with incident links for cloud security defenders and…
crowdstrike/crtAudits Azure AD and Exchange Online configurations for hard-to-find permissions, federation trusts, mail forwarding rules, and delegated access to…
awslabs/aws-security-assessment-solutionAn AWS tool to help you create a point in time assessment of your AWS account using Prowler.
netflix/repokidAWS Least Privilege for Distributed, High-Velocity Deployment
sighupio/permission-managerPermission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW
weaveworks/weave-gitopsWeave GitOps is transitioning to a community driven project! It provides insights into your application deployments, and makes continuous delivery…
owasp/docker-securityGetting a handle on container security
nccgroup/sadcloudA tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
denizparlak/zeusAWS Auditing & Hardening Tool
owasp/dvsaa Damn Vulnerable Serverless Application
elastic/agent-skillsOfficial Elastic Skills
hxsecurity/terraformgoatMulti-cloud vulnerable-by-design deployment tool using Terraform to provision intentionally insecure cloud infrastructure for security training and…
