Cloud Security Tools

kube-bench

Container & Kubernetes Security

A tool to ensure Kubernetes deployments adhere to industry-standard security best practices as outlined in the CIS Kubernetes Benchmark.

Cosign

Container & Kubernetes Security

Code signing and transparency for containers and binaries

Harbor

Container & Kubernetes Security

An open source trusted cloud native registry project that stores, signs, and scans content.

Velociraptor

Incident Response & Forensics

A powerful tool for endpoint visibility and incident response, leveraging the Velociraptor Query Language (VQL) for customizable data collection.

Dispatch

Incident Response & Forensics

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

Tracee

Incident Response & Forensics

A runtime security and forensics tool for Linux environments leveraging eBPF technology.

Vuls

Vulnerability Management

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Clair

Vulnerability Management

Vulnerability Static Analysis for Containers

Trivy

Vulnerability Management

A security scanning solution for cloud and containerized environments.

Prowler

Security Assessment & Audit

Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes.

Kubescape

Container & Kubernetes Security

A security platform for Kubernetes that identifies and remediates misconfigurations, vulnerabilities, and compliance issues.

Snyk CLI

Vulnerability Management

Snyk CLI scans and monitors your projects for security vulnerabilities.