Cloud Container Attack Tool (CCAT)
A tool for testing security of container environments, particularly in cloud settings.
Fortify on Demand
A cloud-based application security service that integrates security testing into the DevOps toolchain.
aws-lint-iam-policies
A tool for validating AWS IAM policies against best practices and identifying security issues.
JFrog Xray
A software composition analysis (SCA) solution that identifies vulnerabilities in open-source components and license compliance violations.
AWS Control Tower Customizations
A solution that combines AWS Control Tower and other AWS services to set up a secure, multi-account AWS environment using best practices.
Immersive Labs
A hands-on training platform for cloud security proficiency, simulating real-world cloud environments.
Azucar
Archived
Security Assessment & Audit
Security auditing tool for Azure environments
BlackSky Cloud Security Labs
Cloud security labs designed to prepare cybersecurity teams for managing and defending cloud infrastructures on AWS, Azure, and GCP.
auditkube
A tool for enhancing security and compliance in Kubernetes environments, focusing on auditing and logging for regulations like HIPAA, PCI, and SOC2.
Pwned Labs
An interactive platform for hands-on training in cloud security, offering both free and premium labs.
Barbican
Barbican is a ReST API designed for the secure storage, provisioning and management of secrets, including in OpenStack environments. Mirror of code maintained at opendev.org.
Cyral
Cyral is a data security platform that manages and secures data access across diverse databases, data pipelines, and data warehouses.