cfripper
skyscanner/cfripperLibrary and CLI tool for analysing CloudFormation templates and check them for security compliance.
cloud-infrastructure-securitycloud-securityconfiguration-auditing+2
414
skyscanner/cfripperLibrary and CLI tool for analysing CloudFormation templates and check them for security compliance.
cloudgraphdev/cliThe universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
rhinosecuritylabs/iamactionhunterAn AWS IAM policy statement parser and query tool.
owasp/kubelightOWASP Kubernetes security and compliance tool [WIP]
wavestone-cdt/abaddonRed team operations management platform automating infrastructure deployment, C2 setup, phishing campaigns, and reconnaissance with integrated tool…
ustayready/outpostAWS Testing and Reporting Management Tool
primait/nuvolaGraph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…
nccgroup/sadcloudA tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
jsa2/eastExtensible Azure Security Tool - Documentation
openclarity/openclarityOpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure
reverseclabs/awspxA graph-based tool for visualizing effective access and resource relationships in AWS environments.
iknowjason/purplecloudA little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…
batfish/pybatfishPython client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
horizon3ai/vcenter_saml_loginA tool to extract the IdP cert from vCenter backups and log in as Administrator
neelkotnis/azure-security-auditorCLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption
salesforce/cloudsplainingCloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.