#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
cartography-cncf/cartographyPulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…
greenbone/openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.
asterisk/asteriskThe official Asterisk Project repository.
open-policy-agent/gatekeeperKubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.
docker/docker-bench-securityThe Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
intuitem/ciso-assistant-communityGRC platform for risk management, compliance, and audit with 200+ frameworks, automatic control mapping, vulnerability management, and incident…
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
aquasecurity/cloudsploitMulti-cloud security posture scanner that audits AWS, Azure, GCP, and OCI for misconfigurations, compliance violations (HIPAA, PCI, CIS), and…
strongswan/strongswanstrongSwan - IPsec-based VPN
hotcakex/harden-windows-securityHarden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build…
complianceascode/contentGenerates SCAP, Ansible, Bash, and CEL security content for compliance evaluation and automated hardening across Linux hosts, containers, and…
nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…
pgbackrest/pgbackrestParallel backup and restore solution for PostgreSQL with encryption, delta restore, and multi-cloud object store support for enterprise disaster…
dnscontrol/dnscontrolInfrastructure as code for DNS!
nolabs-ai/nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxing
itm4n/privesccheckPrivilege Escalation Enumeration Script for Windows
