Cloud Security Tools

s3_objects_check

Security Assessment & Audit

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

Cloudbric Web Application Firewall

Threat Detection & Response

A cloud-based Web Application Firewall (WAF) that protects web applications from malicious traffic at the application layer.

AWS Config to Elasticsearch

Configuration & Change Management

Generates an AWS Config Snapshot and ingests it into ElasticSearch for further analysis using Kibana.

Google Chronicle

Threat Detection & Response

A cloud service for managing and analyzing security and network telemetry data, integrated into Google Cloud as part of Google Security Operations.

PagerDuty Postmortem Documentation

Incident Response & Forensics

PagerDuty's Public Postmortem Documentation

Atakama Browser Security Platform

Threat Detection & Response

A browser security solution designed for Managed Service Providers (MSPs) to secure SaaS applications and critical data.

OWASP WrongSecrets CTF Party

Security Training & Simulation

Run Capture the Flags and Security Trainings with OWASP WrongSecrets

Amazon Detective

Threat Detection & Response

A security service that automates the collection and analysis of log data from AWS resources to investigate security issues.

amazon-inspector-auto-remediate

Vulnerability Management

Lambda job in Python to automatically patch EC2 instances when an inspector assessment generates a CVE finding

Bridgecrew

DevSecOps & Pipeline Security

Bridgecrew automates the identification and remediation of misconfigurations in cloud infrastructure, leveraging its open-source tool Checkov for static analysis of IaC templates.

Amazon Inspector Finding Forwarder

Security Assessment & Audit

Python scripts to run in AWS Lambda to process findings from Amazon Inspector

Mend.io

DevSecOps & Pipeline Security

Mend.io is a platform that integrates security into the software development lifecycle, focusing on open-source dependencies and codebases.