Cloud Security Tools

Kubewatch

Container & Kubernetes Security

A tool for monitoring and notifying teams about resource changes in Kubernetes clusters.

Barracuda Web Application Firewall

Threat Detection & Response

A flexible and scalable solution for protecting web applications from sophisticated attacks, including OWASP Top 10, zero-day threats, and DDoS attacks.

PMapper

Identity & Access Management

A tool for quickly evaluating IAM permissions in AWS.

Lacework Threat Detection

Threat Detection & Response

A cloud security platform that utilizes machine learning for threat detection and response in cloud environments.

Sparrow

Incident Response & Forensics

Sparrow.ps1 is a PowerShell script developed by CISA's Cloud Forensics team to detect compromised accounts and applications in Azure and Microsoft 365 environments.

Cisco Secure Cloud Analytics

Threat Detection & Response

A SaaS-based solution for detecting and responding to threats across cloud and on-premises environments using network telemetry and logs.

BinaryAlert

Threat Detection & Response

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

Securonix Cloud

Threat Detection & Response

A cloud-native SIEM solution for security visibility in distributed cloud environments.

Parliament

Identity & Access Management

AWS IAM linting library

Cloudaware Threat Center

Threat Detection & Response

A security solution for cloud environments that addresses complex security challenges through advanced threat detection and mitigation.

PagerDuty Full Service Ownership Documentation

DevSecOps & Pipeline Security

guide to help teams transition to a full-service ownership model.

Alibaba Cloud Web Application Firewall (WAF)

Threat Detection & Response

A web application firewall that protects web applications from various types of attacks, including SQL injections, XSS, and HTTP flood attacks.