Cloud Security Tools

Conjur

Secrets Management

A robust secrets management system that integrates Role-Based Access Control (RBAC) and security best practices to secure access to critical infrastructure and data.

Amazon Detective

Threat Detection & Response

A security service that automates the collection and analysis of log data from AWS resources to investigate security issues.

Doppler

Secrets Management

A platform for managing sensitive application secrets securely in cloud and DevOps environments.

Bridgecrew

DevSecOps & Pipeline Security

Bridgecrew automates the identification and remediation of misconfigurations in cloud infrastructure, leveraging its open-source tool Checkov for static analysis of IaC templates.

HashiCorp Vault

Secrets Management

A tool for managing and securing sensitive data such as tokens, passwords, certificates, and API keys.

Checkmarx SAST

DevSecOps & Pipeline Security

A static application security testing tool that identifies and mitigates security vulnerabilities early in the software development life cycle.

Sigstore

Supply Chain Security

A tool for ensuring the integrity and authenticity of software artifacts in the supply chain.

Snyk Cloud

DevSecOps & Pipeline Security

Snyk Cloud secures cloud environments by integrating security checks into the development lifecycle, automating scans and continuous monitoring of cloud configurations.

Stacklet Platform

Compliance & Governance

A governance as code platform that extends Cloud Custodian for managing cloud security, compliance, and cost across multiple cloud environments.

Snyk Cloud Security

DevSecOps & Pipeline Security

A platform for securing cloud-native applications and infrastructure by integrating security into the software development lifecycle.

HashiCorp Sentinel

Compliance & Governance

HashiCorp Sentinel is a policy-as-code framework that enables fine-grained policy enforcement across infrastructure management tools, ensuring compliance with business and regulatory requirements.

Spectral

DevSecOps & Pipeline Security

A DevSecOps tool that integrates security into the software development lifecycle, focusing on secret protection and code security.