Pinned Repositories
3tier
aws-audit-automation
Tools to automate AWS Cloud security assessments
AWS-Security-Advanced
aws-security-hub-automated-response-and-remediation
AWS Security Hub Automated Response and Remediation is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The solution makes it easier for AWS Security Hub customers to resolve common security findings and to improve their security posture in AWS.
aws-security-hub-prowler-integrations
aws-securityhub-falco-ecs-eks-integration
Benchmark
The OWASP Benchmark is a test suite designed to verify the speed and accuracy of vulnerability detection tools. The initial version is intended to support Java Static Analysis Security Testing Tools (SAST). A future release will support Dynamic Analysis Security Testing Tools (DAST), like OWASP ZAP, and Interactive Analysis Security Testing Tools (IAST). The goal is that this test application is fully runnable and all the vulnerabilities are actually exploitable so its a fair test for any kind of vulnerability detection tool.
CIS-140
CIS AWS Foundations Benchmark v1.4.0 Remediations
cloud-resume
devsecops-cicd
gtmnagalla's Repositories
gtmnagalla/aws-security-hub-automated-response-and-remediation
AWS Security Hub Automated Response and Remediation is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The solution makes it easier for AWS Security Hub customers to resolve common security findings and to improve their security posture in AWS.
gtmnagalla/aws-securityhub-falco-ecs-eks-integration
gtmnagalla/3tier
gtmnagalla/aws-audit-automation
Tools to automate AWS Cloud security assessments
gtmnagalla/AWS-Security-Advanced
gtmnagalla/aws-security-hub-prowler-integrations
gtmnagalla/Benchmark
The OWASP Benchmark is a test suite designed to verify the speed and accuracy of vulnerability detection tools. The initial version is intended to support Java Static Analysis Security Testing Tools (SAST). A future release will support Dynamic Analysis Security Testing Tools (DAST), like OWASP ZAP, and Interactive Analysis Security Testing Tools (IAST). The goal is that this test application is fully runnable and all the vulnerabilities are actually exploitable so its a fair test for any kind of vulnerability detection tool.
gtmnagalla/CIS-140
CIS AWS Foundations Benchmark v1.4.0 Remediations
gtmnagalla/cloud-resume
gtmnagalla/devsecops-cicd
gtmnagalla/django.nv
gtmnagalla/DNS-over-TLS-proxy
DNS-over-TLS proxy
gtmnagalla/docker-bench-security
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
gtmnagalla/enumerate-iam
Enumerate the permissions associated with AWS credential set
gtmnagalla/prowler
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
gtmnagalla/docker-goof
Vulnerable Docker Repository for Testing
gtmnagalla/GD-SecHub-EC2
gtmnagalla/kubernetes-security
gtmnagalla/restricted-ssh-autoremediation
disallow unrestricted incoming SSH traffic
gtmnagalla/sast-scan
snyk and other sast
gtmnagalla/sentinel
gtmnagalla/vapi
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.