prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
kyverno/kyvernoEnforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…
snyk/cliSnyk CLI scans and monitors your projects for security vulnerabilities.
kubescape/kubescapeOpen-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…
cloud-custodian/cloud-custodianRules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
opencspm/opencspmOpen Cloud Security Posture Management Engine
rolix44/kubestroyerGo-based Kubernetes exploitation tool that scans for exposed ports and exploits cluster misconfigurations, including anonymous Kubelet RCE and etcd…
cred-club/dialEvent-driven AWS security misconfiguration detection framework that monitors multiple accounts in real-time, triggering alerts via Lambda for IAM,…
blake-fm/vcenter-log4jScript to apply official workaround for VMware vCenter log4j vulnerability CVE-2021-44228
open-policy-agent/conftestWrite tests against structured configuration data using the Open Policy Agent Rego query language
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
complianceascode/contentGenerates SCAP, Ansible, Bash, and CEL security content for compliance evaluation and automated hardening across Linux hosts, containers, and…
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
stelligent/cfn_nagLinting tool for CloudFormation templates
hahwul/s3reverseThe format of various s3 buckets is convert in one format. for bugbounty and security testing.
open-policy-agent/gatekeeperKubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.
