Top 17 cloudsecurity Open-Source Projects

• ThreatMapper

  32 4,623 9.9 TypeScript

  Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

  

Project mention: ThreatMapper: Open-source cloud native security observability platform | news.ycombinator.com | 2023-09-10

• terrascan

  22 4,472 6.9 Go

  Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

  

Project mention: A Deep Dive Into Terraform Static Code Analysis Tools: Features and Comparisons | dev.to | 2024-04-16

Terrascan Owner/Maintainer: Tenable (acquired in 2022) Age: First release on GitHub on November 28th, 2017 License: Apache License 2.0

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• kubernetes-goat

  18 3,857 5.8 HTML

  Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

• policy_sentry

  5 1,938 8.1 Python

  IAM Least Privilege Policy Generator

  

• PMapper

  7 1,318 0.0 Python

  A tool for quickly evaluating IAM permissions in AWS.

  

• Cloud-DevOps-Learning-Resources

  2 1,270 2.3

  This repo includes Books and imp notes related to GCP, Azure, AWS, Docker, K8s, and DevOps. More, exam and interview prep notes.

• yor

  2 774 7.7 Go

  Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

  

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• ZeusCloud

  24 666 7.7 TypeScript

  Open Source Cloud Security

  

Project mention: Open-source IAM Access Visualizer | /r/devsecops | 2023-05-17

It’s part of an open source cloud security platform we’re maintaining. Inspired by discussions with folks in the cloud sec community sharing challenges around assessing blast radius, potential lateral movements, and IAM context around alerts they receive.

• rpCheckup

  7 158 0.0 Go

  rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.

  

• magpie

  4 154 7.6 Java

  A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks. (by openraven)

  

Project mention: Cloud asset tracking | /r/aws | 2023-12-09

There both do something like what you're looking for.... https://github.com/cloudquery/cloudquery https://github.com/openraven/magpie

• introspector

  1 66 0.0 Python

  A schema and set of tools for using SQL to query cloud infrastructure.

  

• enclaive-docker-nginx-sgx

  3 27 0.0 C

  SGX-ready Enclaive Docker Image for Nginx

  

• SecurityChecklists

  3 17 0.0

  The SaaS CTO Security Checklist Redux, The DevOps Security Checklist, and The Personal Infosec & Security Checklist

• hawk

  2 14 3.7 Go

  Multi Cloud Antivirus Scanning API using YARA and CLAMAV for AWS S3, Azure Blob Storage and GCP Cloud Storage (by cloudina)

  

• enclaive-docker-mariadb-sgx

  3 7 0.0 Dockerfile

  SGX-ready Enclaive Docker Image for MariaDB

  

• applied-security

  3 6 10.0 JavaScript

  A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Cybersecurity

• enclaive-docker-mosquitto-sgx

  1 2 0.0 Shell

  SGX-ready Enclaive Docker Image for Eclipse Mosquitto

  

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

cloudsecurity related posts

• applied-security: A collection of publicly available resources on how technology and tech-savvy organizations around the world practice Cybersecurity.
  1 project | /r/CKsTechNews | 7 Nov 2022
• Applied Security
  1 project | news.ycombinator.com | 6 Nov 2022
• Anyone tried to create a halfway decent least privilege policy for a CDK deployment?
  1 project | /r/aws | 6 Jul 2022
• Do you know a way to visulize access flow between users and resources?
  1 project | /r/devops | 23 Jun 2022
• Policy Sentry - IAM Least Privilege Policy Generator
  2 projects | dev.to | 7 Jun 2022
• Any opensource Devops related projects to contribute to?
  3 projects | /r/devops | 8 May 2022
• cfsec
  1 project | /r/devopskhan | 19 Oct 2021
• A note from our sponsor - InfluxDB
  www.influxdata.com | 19 Apr 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com