Latest Updates

zizmor

DevSecOps & Pipeline Security

A static analysis tool for GitHub Actions that identifies common security issues in CI/CD setups.

WebVM

Infrastructure Security & Hardening

Virtual Machine for the Web

Vuls

Vulnerability Management

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Velociraptor

Incident Response & Forensics

A powerful tool for endpoint visibility and incident response, leveraging the Velociraptor Query Language (VQL) for customizable data collection.

Trivy

Vulnerability Management

A security scanning solution for cloud and containerized environments.

Tracee

Incident Response & Forensics

A runtime security and forensics tool for Linux environments leveraging eBPF technology.

ThreatModel for Amazon S3

Threat Detection & Response

A library of attack scenarios and mitigation strategies for Amazon S3, addressing security challenges in the Shared Responsibility Model.

ThreatMapper

Threat Detection & Response

Open Source Cloud Native Application Protection Platform (CNAPP)

tfsec

DevSecOps & Pipeline Security

A security scanner for Terraform configurations that identifies potential vulnerabilities through static analysis.

Terrascan

Archived

DevSecOps & Pipeline Security

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

TerraGoat

DevSecOps & Pipeline Security

TerraGoat is a Terraform repository designed to demonstrate common configuration errors in cloud environments.

Syft

Supply Chain Security

A CLI tool and Go library for generating Software Bill of Materials (SBOMs) from container images and filesystems.

SOPS

Secrets Management

Simple and flexible tool for managing secrets

Sn1per

Penetration Testing Tools

Attack Surface Management Platform

Snyk CLI

Vulnerability Management

Snyk CLI scans and monitors your projects for security vulnerabilities.

Repokid

Identity & Access Management

AWS Least Privilege for Distributed, High-Velocity Deployment

Prowler

Security Assessment & Audit

Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes.

Pacu

Penetration Testing Tools

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Nettacker

Penetration Testing Tools

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

ModSecurity

Security Monitoring & Logging

Web application firewall (WAF) engine for Apache, IIS and Nginx.