Startup-SBOM
morpheuslord/startup-sbomA tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and CVE.
cloud-securityconfiguration-auditingcontainer-security+4
17
morpheuslord/startup-sbomA tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and CVE.
digitalocean/nginxconfig.ioInteractive NGINX configuration generator that produces optimized, security-hardened server configs with HTTPS, HTTP/2, HSTS, SSL profiles, caching,…
k3rnix/portguardUSB port access control tool for Debian with whitelist management, automatic background scanning daemon, and CLI interface to block or allow USB…
cisofy/lynisAgentless security auditing tool for Linux, macOS, and UNIX systems. Performs in-depth scans for vulnerabilities, configuration issues, and…
a-yatta/amdhAutomated Android device hardening tool that scans installed apps for malware, audits system settings against CIS benchmarks, revokes dangerous…
ofriouzan/hardeningmeterScans ELF binaries and Linux systems for security hardening mechanisms (Stack Canary, RELRO, ASLR, PIE, NX) and exports results to table, CSV, or…
appliscale/cloud-security-auditA command line security audit tool for Amazon Web Services
sap/macos-enterprise-privilegesTemporary macOS admin rights management tool for enterprise environments. Grants time-limited administrator privileges on-demand, enhancing security…
sighupio/permission-managerWeb-based Kubernetes RBAC management tool for creating users, assigning namespaces and permissions, and distributing Kubeconfig files via an…
cyberark/kubiscanA tool to scan Kubernetes cluster for risky permissions
softrams/bulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
stra-x/outoftuneRogue device enrollment tool for Entra ID and Intune MDM. Automates device join, token acquisition, MDM enrollment, and OMA-DM checkin to extract…
synacktiv/bissapA new open-source tool to quickly audit SAP permissions.
netwrix/pingcastlecloudAzure AD security assessment tool that evaluates tenant configuration and identity risk, scoring findings through a maturity framework to prioritize…
getsops/sopsSimple and flexible tool for managing secrets
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
ossf/scorecardAutomated tool that assesses open source project security using heuristic checks, assigns scores 0-10, and provides remediation guidance to improve…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.