Cloud Security Tools

in-toto

Supply Chain Security

A tool for ensuring the integrity of software supply chains by providing a transparent and verifiable record of all steps performed.

CloudForecast

Cost Security & FinOps

A tool for managing and predicting AWS costs, providing granular cost visibility and automated reporting for engineering, DevOps, SRE, and infrastructure teams.

Pyrsia

Supply Chain Security

A decentralized, secure build network and package repository that addresses vulnerabilities in the open-source software supply chain.

Google Cloud Cost Management

Cost Security & FinOps

A tool for managing and optimizing cloud spending with features for visibility, control, and efficiency.

Dependency-Track

Supply Chain Security

A platform for managing risk in the software supply chain by leveraging Software Bill of Materials (SBOM) analysis.

CloudZero

Cost Security & FinOps

CloudZero provides granular cloud cost insights by integrating billing and telemetry data, enabling precise cost allocation and anomaly detection.

Stacklet Platform

Compliance & Governance

A governance as code platform that extends Cloud Custodian for managing cloud security, compliance, and cost across multiple cloud environments.

IBM Turbonomic

Cost Security & FinOps

IBM Turbonomic provides application resource management and cloud cost optimization capabilities for hybrid and multi-cloud environments.

HashiCorp Sentinel

Compliance & Governance

HashiCorp Sentinel is a policy-as-code framework that enables fine-grained policy enforcement across infrastructure management tools, ensuring compliance with business and regulatory requirements.

Finout

Cost Security & FinOps

A FinOps solution for cloud cost management, enhancing visibility, allocation, and optimization of cloud expenses.

Open Policy Agent

Compliance & Governance

Open Policy Agent (OPA) is a unified policy framework that enables fine-grained, context-aware policy management across cloud-native systems.

AWS CloudTrail

Security Monitoring & Logging

Enables governance, compliance, and operational auditing of your AWS account.