Cloud Security Tools

Koku

Cost Security & FinOps

An open source solution for cost management of cloud and hybrid cloud environments.

Cloudflare Zero Trust

Zero Trust Security

A cloud-native security solution that replaces traditional network perimeters with a globally distributed network, ensuring secure access for users in hybrid work environments.

AWS Vault

Secrets Management

A vault for securely storing and accessing AWS credentials in development environments

Banyan Security Zero Trust Remote Access

Zero Trust Security

A platform designed to secure remote access in hybrid and multi-cloud environments, replacing traditional VPNs with a Zero Trust approach.

DFIR-ORC

Incident Response & Forensics

Forensics artefact collection tool for systems running Microsoft Windows

BeyondCorp Enterprise

Zero Trust Security

Google's BeyondCorp Enterprise is a zero-trust security solution designed to provide secure access to applications and cloud resources without the need for traditional VPNs.

Barbican

Secrets Management

Barbican is a ReST API designed for the secure storage, provisioning and management of secrets, including in OpenStack environments. Mirror of code maintained at opendev.org.

Zero Trust Application Access

Zero Trust Security

A security solution that provides secure access to privately owned resources without traditional VPNs, integrating with Harmony SASE private networks.

SansShell

Identity & Access Management

A non-interactive daemon for host management using gRPC for remote interactions and policy enforcement through Open Policy Agent (OPA).

Prisma Access

Zero Trust Security

A cloud-delivered Security Service Edge (SSE) solution that integrates multiple security functions for the hybrid workforce.

aws-lint-iam-policies

Identity & Access Management

A tool for validating AWS IAM policies against best practices and identifying security issues.

Duo Zero Trust Security

Zero Trust Security

Duo's zero trust security solution ensures that only authorized users and devices access sensitive applications and data, addressing the complexities of modern IT environments.