
cloudflared
Client for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…

Client for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Multi-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…

Cloud-native chaos engineering platform for Kubernetes with fault injection, workflow orchestration, and steady-state validation to surface system…

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

Audits Azure AD and Exchange Online configurations for hard-to-find permissions, federation trusts, mail forwarding rules, and delegated access to…

An AWS tool to help you create a point in time assessment of your AWS account using Prowler.

Permission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW

Weave GitOps is transitioning to a community driven project! It provides insights into your application deployments, and makes continuous delivery…

🛡️ 🔒 This project's goal is to be simple to create and destroy your own VPN service using WireGuard.

Review Access - kubectl plugin to show an access matrix for k8s server resources

A tool to extract the IdP cert from vCenter backups and log in as Administrator

Automated scanner that hunts for secrets (API keys, credentials) accidentally uploaded to public S3 buckets, using truffleHog3 for detection and…