cspm
There are 73 repositories under cspm topic.
prowler-cloud/prowler
Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuous monitoring, security assessments & audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, ENS and more
turbot/steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
cloudquery/cloudquery
The open source ELT framework powered by Apache Arrow
deepfence/ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
aquasecurity/cloudsploit
Cloud Security Posture Management (CSPM)
someengineering/fixinventory
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
HummerRisk/HummerRisk
HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
cloudgraphdev/cli
The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
stackql/stackql
Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework
Zeus-Labs/ZeusCloud
Open Source Cloud Security
opengovern/opensecurity
opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.
selefra/selefra
The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).
turbot/powerpipe
Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.
OpenCSPM/opencspm
Open Cloud Security Posture Management Engine
openraven/magpie
A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.
someengineering/cloud-security-list
A list of cloud security tools and vendors.
goldfiglabs/rpCheckup
rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.
CloudDefenseAI/falco_extended_rules
Curating Falco rules with MITRE ATT&CK Matrix
PaloAltoNetworks/prisma_channel_resources
A collection of technical and sales resources related to Prisma Cloud Compute and Prisma Cloud Enterprise created for the PANW Channel Partner Ecosystem and other engineers working with the solution
goldfiglabs/introspector
A schema and set of tools for using SQL to query cloud infrastructure.
elastic/cloudbeat
Analyzing Cloud Security Posture
somethingnew2-0/SimpleCSPM
GCP CSPM using Google Sheets
infraql/infraql
Query and Provision Cloud Infrastructure using an extensible SQL based grammar
vikrum/SecurityChecklists
The SaaS CTO Security Checklist Redux, The DevOps Security Checklist, and The Personal Infosec & Security Checklist
samvas-codes/cspm-gpt
The following is a simple example of how LLMs and langchain agents can simplify asking questions to understand the security posture of a cloud environment.
CrowdStrike/cloud-resource-estimator
Cloud deployment size calculation utilities
ca-risken/doc
RISKEN is a monitoring tool for visualizing security risks.
ollionorg/cloud-custodian-aws-policies
CloudCustodian Rules engine for cloud security and governance, DSL in yaml for policies to query, filter, and take actions on resources
OpenCSPM/opencspm-darkbit-community-controls
OpenCSPM Community Controls
PaloAltoNetworks/learn-prisma-cloud-automation
A set of tutorials to learn how to automate various Prisma Cloud tasks.
aws-samples/inventory-management-for-amazon-ec2
Inventory Management for amazon EC2 Demo CDK
stackql/pystackql
Python interface for StackQL
OpenCSPM/opencspm-darkbit-enterprise-controls
OpenCSPM Enterprise Controls
Kloudle/aws-iam-large-account-security
Security insights for AWS IAM in large-scale accounts (20K+ users), bypassing CSPM limitations.
openraven/aws-api-discovery
AWS discovery via the AWS API
stackql/setup-stackql
Sets up the stackql cli in your GitHub Actions workflow.