Cloud Security Security Tools

retrieve information via O365 and AzureAD with a valid cred

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

A Central Control Plane for AWS Permissions and Access

Cloud security monitoring tool and framework

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Find cloud assets that no one wants exposed 🔎 ☁️

Multi-Cloud Security Auditing Tool

Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, ENS and more

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

Cloud Security Posture Management (CSPM)

Open Source Cloud Native Application Protection Platform (CNAPP)

A vault for securely storing and accessing AWS credentials in development environments

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Cloud Security Operations Orchestrator

A graph-based tool for visualizing effective access and resource relationships in AWS environments.