Cloud Security Tools

Rekor

Supply Chain Security

Software Supply Chain Transparency Log

Bridgecrew

DevSecOps & Pipeline Security

Bridgecrew automates the identification and remediation of misconfigurations in cloud infrastructure, leveraging its open-source tool Checkov for static analysis of IaC templates.

aws_pwn

Penetration Testing Tools

A collection of AWS penetration testing junk

Mend.io

DevSecOps & Pipeline Security

Mend.io is a platform that integrates security into the software development lifecycle, focusing on open-source dependencies and codebases.

Cloud Security Suite

Security Assessment & Audit

A tool for auditing the security posture of AWS, GCP, and Azure infrastructures.

Checkmarx SAST

DevSecOps & Pipeline Security

A static application security testing tool that identifies and mitigates security vulnerabilities early in the software development life cycle.

CloudBrute

Penetration Testing Tools

Awesome cloud enumerator

Snyk Cloud

DevSecOps & Pipeline Security

Snyk Cloud secures cloud environments by integrating security checks into the development lifecycle, automating scans and continuous monitoring of cloud configurations.

Repokid

Identity & Access Management

AWS Least Privilege for Distributed, High-Velocity Deployment

Snyk Cloud Security

DevSecOps & Pipeline Security

A platform for securing cloud-native applications and infrastructure by integrating security into the software development lifecycle.

Parliament

Identity & Access Management

AWS IAM linting library

Spectral

DevSecOps & Pipeline Security

A DevSecOps tool that integrates security into the software development lifecycle, focusing on secret protection and code security.