#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
cryptomator/cryptomatorCross-platform client-side encryption for cloud storage with AES-256, encrypted filenames, obfuscated folder structure, and transparent virtual drive…
nvidia/openshellSandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…
semgrep/semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
leaningtech/webvmClient-side Linux virtual machine running in the browser via WebAssembly, with Tailscale networking, Dockerfile-based custom images, and CTF…
oauth2-proxy/oauth2-proxyA reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
mailcow/mailcow-dockerizedDockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…
wagoodman/diveA tool for exploring each layer in a docker image
cloudflare/cloudflaredClient for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…
decalage2/awesome-security-hardeningA collection of awesome security hardening guides, tools and other resources
dexidp/dexOpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
future-architect/vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
anchore/grypeA vulnerability scanner for container images and filesystems
ory/hydraOpenID Certified OAuth 2.0 and OpenID Connect provider for token issuance, client management, JWKS, and login/consent flow orchestration via headless…
traccar/traccarTraccar GPS Tracking System
cachethq/cachet🚦 Cachet, the open source, self-hosted status page system.
quay/clairVulnerability Static Analysis for Containers
aws/serverless-application-modelTransforms SAM templates into CloudFormation resources, generating Lambda functions, IAM roles, and policies with built-in serverless best practices.
