#cloud-security (18 Repositories)
Ranked open-source repositories tagged with #cloud-security, scored by pull request acceptance likelihood and maintainer engagement velocity.
40.3%
47.4h
18 repositories tagged #cloud-security
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
DataDog/stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
filipi86/drogonsec
High-performance open-source security scanner combining SAST, SCA, Secret Detection, and IaC analysis, built for developers and CI/CD pipelines, using AI for recommendation!
cynative/cynative
Open-source security agents for cloud, code and runtime. 45 built-in agents audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab for privilege escalation, public exposure, supply chain and more, or build your own in one markdown file. Live, read-only access to your infrastructure.
stackql/stackql
Query, provision and operate Cloud, SaaS, API and Model Context Protocol (MCP) resources through a unified SQL-based framework for humans and AI agents.
awslabs/iam-policy-autopilot
IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.
salesforce/cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
rezmoss/cloud-provider-ip-addresses
Daily-updated IP ranges for 60+ providers (AWS, Azure, GCP, Cloudflare, GitHub, Fastly, Linode + GoogleBot, BingBot, GPTBot) in 13+ formats: TXT, JSON, CSV, SQL, Nginx, Apache, iptables, nftables, UFW, HAProxy, Caddy + merged CIDRs
BishopFox/cloudfox
Automating situational awareness for cloud penetration tests.
cyberark/SkyArk
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
Mafifrizi/ARES
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
elastic/harp
Secret management by contract toolchain
vectra-ai-research/MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
cdxiaodong/cain-agent
Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
AabyssZG/Docker-TCP-Scan
旨在以攻促防，针对Docker TCP socket的开源利用工具
tmobile/pacbot
PacBot (Policy as Code Bot)
SecurityFTW/cs-suite
Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
chaitin/veinmind-tools
veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集