Top 12 HCL Security Projects

Security

• Add a project

1. terraform-aws-secure-baseline

   1 1 1,197 0.0 HCL

   Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

   

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. semgrep-rules

   2 12 1,199 8.0 HCL

   Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

   

   Project mention: How to Write Custom Semgrep Rules: Complete Tutorial | dev.to | 2026-04-06

   Fork the semgrep-rules repository

4. pike

   3 6 915 9.5 HCL

   Pike is a tool for determining the permissions or policy required for IAC code

   

5. terraform-aws-ec2-instance

   4 1 170 6.3 HCL

   Terraform module for provisioning a general purpose EC2 host (by cloudposse)

   

6. terraform-aws-oidc-github

   5 2 116 7.5 HCL

   Terraform module to configure GitHub Actions as an OpenID Connect (OIDC) identity provider in AWS.

   

7. KaiMonkey

   6 1 107 4.6 HCL

   KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.

   

8. terraform-aws-waf

   7 2 52 7.3 HCL

   

9. gcp-landing-zone

   8 1 38 7.1 HCL

   Leverage Ollion's GCP Landing Zone to deploy a secure, compliant foundation with ease. The repository contains an implementation of a secure and compliant landing zone pattern that will help expedite cloud migration for an enterprise in a heavily regulated industry.

   

10. awesome-amazon-verified-permissions-and-cedar

    9 2 25 7.7 HCL

    Central hub for learning, using, and mastering Amazon Verified Permissions (AVP) and Cedar.

    

11. terraform-modules

    10 1 4 9.2 HCL

    Terraform modules (by zachreborn)

    

12. iac-toolbox-project

    11 2 2 - HCL

    Learning Infrastructure as Code

    

    Project mention: Infrastructure as Code Toolbox - A Hands-On Terraform Journey Through AWS | dev.to | 2026-05-06

    This is infrastructure as code tutorial, so the code of the infrastructure is available in this GitHub repository. Feel free to clone it and follow along!

13. nodejs-leak-env-vars

    12 1 0 0.0 HCL

    POC of a vulnerable app leaking environment variables via a compromised NPM package

    

HCL Security related posts

• Shielding Your Apps in the Cloud: Integrating CloudFront and AWS WAF with Terraform

  4 projects | dev.to | 23 Jan 2024

• What's new in the CIS v2.0 benchmark for AWS

  1 project | dev.to | 7 Jul 2023

• Open source automated AWS CIS v2.0 benchmark assessment just released by Steampipe.io

  2 projects | /r/cybersecurity | 7 Jul 2023

• [Terraform] TFSEC vs Tchekhov vs Terrascan - Que recommandez-vous ?

  1 project | /r/enfrancais | 11 Apr 2023

• Semgrep - Beta support for Rust

  1 project | /r/rust | 3 Mar 2023

• Is there an open source version of Dome9?

  1 project | /r/aws | 1 Mar 2023

• CLoud Custodian - Pretty Output? Alternatives?

  1 project | /r/aws | 22 Oct 2022
• A note from our sponsor - SaaSHub
  www.saashub.com | 11 Jul 2026

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending HCL projects with our weekly report!