Cloud Security Tools

zizmor

DevSecOps & Pipeline Security

A static analysis tool for GitHub Actions that identifies common security issues in CI/CD setups.

API Sentinel

API Security

API Sentinel provides continuous runtime API visibility, shadow API discovery, and risk analysis to secure APIs in modern cloud and container-based architectures.

AWS Well-Architected Labs

Security Training & Simulation

Hands on labs and code to help you learn, measure, and build using architectural best practices.

API Secure

API Security

A tool for securing modern APIs against vulnerabilities and data breaches.

Knox

Secrets Management

Knox is a secret management service

Fastly Cloud Security

API Security

Fastly's cloud security solutions protect web applications, APIs, and microservices from various threats, including DDoS attacks and bot traffic.

Cloud Forensics Utils

Incident Response & Forensics

Python library to carry out DFIR analysis on the Cloud

Noname API Security Platform

API Security

A suite for securing APIs in complex environments, focusing on discovery, posture management, and runtime protection.

NAXSI

Threat Detection & Response

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

F5 Distributed Cloud WAAP

API Security

A solution for securing web applications and APIs across diverse environments.

breakglass

Identity & Access Management

emergency/debugging access for gokrazy installations

Aqua Security Vulnerability Management

Vulnerability Management

Aqua Security's vulnerability management tool identifies and remediates vulnerabilities across cloud-native environments, integrating into CI/CD pipelines for continuous scanning.