Cloud Security Tools

Cosign

Container & Kubernetes Security

Code signing and transparency for containers and binaries

Google Cloud Key Management Service (KMS)

Data Security & Encryption

Google Cloud Key Management Service (KMS) provides a secure and efficient way to manage encryption keys in cloud environments, ensuring data security and compliance with regulatory standards.

Checkov

DevSecOps & Pipeline Security

Checkov is a static code analysis tool for infrastructure-as-code (IaC) configurations, ensuring security and compliance across various cloud platforms.

AWS Key Management Service (KMS)

Data Security & Encryption

AWS Key Management Service (KMS) provides a centralized platform for creating, managing, and using encryption keys, ensuring data protection across various AWS workloads.

Gatekeeper

Compliance & Governance

Gatekeeper - Policy Controller for Kubernetes

Google Cloud External Key Manager

Data Security & Encryption

Google Cloud External Key Manager (Cloud EKM) provides a secure way to manage encryption keys externally while integrating with Google Cloud services.

Hadolint

Container & Kubernetes Security

Dockerfile linter, validate inline bash, written in Haskell

Google Cloud Data Loss Prevention (Cloud DLP)

Data Security & Encryption

Google Cloud Data Loss Prevention (Cloud DLP) provides tools for discovery, classification, and protection of sensitive data in cloud environments.

Nettacker

Penetration Testing Tools

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Amazon Macie

Data Security & Encryption

A service that helps identify and protect sensitive data in AWS, particularly in S3 environments, using machine learning and pattern matching.

Grype

Vulnerability Management

A vulnerability scanner for container images and filesystems

AWS CloudHSM

Data Security & Encryption

A cloud-based hardware security module service for managing cryptographic keys securely.