checkov
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
cloud-infrastructure-securitycloud-securitycode-analysis+12
9.0k
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
batfish/pybatfishPython client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior…
primait/nuvolaGraph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
skyscanner/lambdaguardAWS Lambda auditing tool for asset visibility, statistical analysis, dependency mapping, and security configuration checks across serverless…
tenable/escalategptAn AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.
openclarity/openclarityAgentless platform for discovering and managing VM security threats including vulnerabilities, malware, rootkits, misconfigurations, leaked secrets,…
horizon3ai/vcenter_saml_loginA tool to extract the IdP cert from vCenter backups and log in as Administrator
netwrix/pingcastlecloudAzure AD security assessment tool that evaluates tenant configuration and identity risk, scoring findings through a maturity framework to prioritize…
aker-gateway/akerSSH bastion gateway with session recording, command extraction, and SIEM-ready logging. Integrates with FreeIPA for identity management and supports…
openbmc/bmcwebA do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC
rootsecdev/secretsstalkerRead-only Entra ID app-credential assessment: enumerates Graph permissions, Azure RBAC, and reachable cloud data, then maps findings to…
qarait/ephemeraSelf-hosted SSH Certificate Authority replacing static keys with short-lived certificates, enforcing WebAuthn MFA, RBAC, and tamper-evident audit…
csandker/azure-accesspermissionsPowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…
nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…
dnscontrol/dnscontrolDeclarative DNS management tool with a JavaScript-compatible DSL for automating DNS record changes across 64+ providers, enabling GitOps workflows…
duo-labs/cloudmapperAnalyze AWS environments for security misconfigurations, audit IAM policies, map network topology, and identify unused resources with a comprehensive…
salesforce/cloudsplainingAWS IAM security assessment tool that scans policies for least-privilege violations, identifies data exfiltration, privilege escalation, and…