Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Pomerium is an identity and context-aware access proxy.

A serverless JWT exchanger and OIDC IdP

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Tfsec is now part of Trivy

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in re…

Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable remediation steps. Open-sourced by Ermetic.

Find, verify, and analyze leaked credentials

Orchestrate GitHub Actions Security

A script and python package to check your AWS service limits and usage via boto3.

The easiest way to access your cloud.

Bare minimum AWS Security Alerting and Configuration

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

A tool for quickly evaluating IAM permissions in AWS.

Collection of incidents resulting from caching issues

Automate permissions to your cloud and critical applications.