
smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.

An embeddable, portable, branchable virtual machine to safely run Agents locally.

Snyk CLI scans and monitors your projects for security vulnerabilities.

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from…

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

Enforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…

Microsoft Sentinel SIEM Log Source Analyzer

Infrastructure as code for DNS!

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

Lan Tian's NixOS Configuration

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

Python client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior…

Hardened, Azure-optimized Linux distribution built from Fedora sources with RPM packaging, supply chain security, and declarative configuration for…

Workload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…