Do you want to contribute to this list? Feel free to send a PR and make sure your tool is Open Source.
| Name | Description | Popularity | Metadata |
|---|---|---|---|
| Cloud Security Tools | This list of open source tools for AWS security |
| Name | Description | Popularity | Metadata |
|---|---|---|---|
| Prowler | Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more. (Python) | ||
| Komiser | Cloud Environment Inspector analyze and manage cloud cost usage security and governance in one place. | ||
| Steampipe | Use SQL to instantly query your cloud services (AWS, Azure, GCP and more). Open source CLI. No DB required. (SQL) | ||
| Akto | Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure | ||
| Trivy | Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more | ||
| Wazuh | Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | ||
| Uptime Kuma | A fancy self-hosted monitoring tool | ||
| TruffleHog | Find and verify credentials | ||
| Gitleaks | Protect and discover secrets using Gitleaks 🔑 | ||
| Policy Sentry | IAM Least Privilege Policy Generator | ||
| Kubescape | Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources. |