#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
cartography-cncf/cartographyPulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…
flatpak/flatpakLinux application sandboxing and distribution framework
awarexone/agentic-bug-hunterAI-powered bug bounty hunting toolkit that works with or without subscription.
cilium/tetragoneBPF-based Security Observability and Runtime Enforcement
shuvonsec/claude-bug-bountyAI-powered bug bounty hunting toolkit that works with or without subscription.
fabacab/awesome-cybersecurity-blueteam:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
greenbone/openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.
dirkjanm/roadtoolsA collection of Azure AD/Entra tools for offensive and defensive security purposes
docker/docker-bench-securityThe Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
open-policy-agent/gatekeeperKubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
microsoft/liteboxA security-focused library OS supporting kernel- and user-mode execution
smol-machines/smolvmAn embeddable, portable, branchable virtual machine to safely run Agents locally.
zizmorcore/zizmorStatic analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…
aquasecurity/traceeLinux Runtime Security and Forensics using eBPF
aquasecurity/cloudsploitMulti-cloud security posture scanner that audits AWS, Azure, GCP, and OCI for misconfigurations, compliance violations (HIPAA, PCI, CIS), and…
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
