Cloud Security Tools

aws-allowlister

Archived

Compliance & Governance

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

Lacework

Threat Detection & Response

Lacework addresses the complex security and operational challenges in cloud environments through its cloud workload protection platform (CWPP) and cloud-native security architecture.

PagerDuty DevSecOps Documentation

DevSecOps & Pipeline Security

A guide for integrating security into the development and operations lifecycle, emphasizing the importance of early security checks and cross-team collaboration.

Trend Micro Cloud One

Threat Detection & Response

A security solution for hybrid cloud environments, integrating multiple security services for enhanced protection.

OWASP NodeGoat

Security Training & Simulation

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

Zscaler Internet Access

Threat Detection & Response

A cloud-delivered security service edge platform that protects users and data in a hybrid workforce environment.

CloudSecurity

Secrets Management

Cloud security projects with Spring Cloud Config Server and Vault

Splunk Enterprise Security

Threat Detection & Response

A unified platform for threat detection, investigation, and response, addressing fragmented security data.

Terraform Provider for PolicyGuru

Identity & Access Management

Terraform provider for Policy Sentry (IAM least privilege generator and auditor)

Microsoft Security Copilot

Threat Detection & Response

An AI-powered solution for managing and responding to security threats in real-time, integrating OpenAI's GPT-4 with Microsoft security models.

aws-lint-iam-policies

Identity & Access Management

A tool for validating AWS IAM policies against best practices and identifying security issues.

Cloudflare WAF

Threat Detection & Response

A web application firewall that protects web and API applications from various threats.