Cloud security engineers are notoriously overworked and under-resourced. This curated list has links to tools, frameworks and resources to make their lives easier.
- Cloud Security Alliance Research
- Google Project Zero
- Microsoft Security Response Center
- Orca Research Pod
- Rapid7 Research
- Team Nautilus by Aqua Security
- Unit 42 by Palo Alto Networks
These are vendors with publicly traded stocks. The links lead to a vendor's website, LinkedIn company page and the stock price on Yahoo! Finance.
- Check Point | LinkedIn | CHKP
- CrowdStrike | LinkedIn | CRWD
- Datadog | LinkedIn | DDOG
- HashiCorp | LinkedIn | HCP
- Palo Alto Networks | LinkedIn | PANW
- Qualys | LinkedIn | QLYS
- Radware | LinkedIn | RDWR
- SentinelOne | LinkedIn | S
- Splunk | LinkedIn | SPLK
- Tenable | LinkedIn | TENB
- Zscaler | LinkedIn | ZS
Venture-funded companies
- Aqua Security | LinkedIn | Crunchbase
- Astrix | LinkedIn | Crunchbase
- Bionic | LinkedIn | Crunchbase --> acquired by Crowdstrike
- Cyware | LinkedIn | Crunchbase
- Deepfence | LinkedIn | Crunchbase
- Dig Security | LinkedIn | Crunchbase
- Endor Labs | LinkedIn | Crunchbase
- GitGuardian | LinkedIn | Crunchbase
- JupiterOne | LinkedIn | Crunchbase
- Lacework | LinkedIn | Crunchbase
- Lightspin | LinkedIn | Crunchbase --> acquired by Cisco
- Mandiant | LinkedIn | Crunchbase --> acquired by Google
- Normalyze | LinkedIn | Crunchbase
- Noq | LinkedIn | Crunchbase
- Orca Security | LinkedIn | Crunchbase
- Query | LinkedIn | Crunchbase
- Pangea | Linkedin | Crunchbase
- Rapid7 | Linkedin | Crunchbase
- Runecast | LinkedIn | Crunchbase
- Scrut Automation | LinkedIn | Crunchbase
- Snyk | LinkedIn | Crunchbase
- Sonar | LinkedIn | Crunchbase
- Trellix | LinkedIn | Crunchbase
- UpGuard | LinkedIn | Crunchbase
- Wiz | LinkedIn | Crunchbase
Angel-funded companies
Native security products offered by the major cloud platforms (AWS, GCP, Azure)
- AWS Shared Responsibility Model
- GCP Shared responsibilities and shared fate on Google Cloud
- Azure Shared Responsibility in the cloud
- DigitalOcean Shared Responsibliity Model
- AWS Cloud Security
- Amazon Detective
- Amazon GuardDuty
- Amazon Security Lake
- AWS Artifact
- AWS Audit Manager
- AWS Config
- AWS Security Hub
- AWS Trusted Advisor
- BloodHound
- Cartography
- Checkov
- Cloudquery
- CloudSploit
- DefectDojo
- Falco
- Gapps
- Greenbone OpenVAS Scanner
- Magpie
- Prowler
- Resoto
- S3Scanner
- Sadcloud
- ScoutSuite
- Steampipe
- tfsec
- ThreatMapper
- trivy
- Wazuh
- ZeusCloud