Cloud Security

An open-source security tool for AWS, Azure, and GCP that performs best practices assessments, security checks, and continuous compliance monitoring. Ideal for identifying misconfigurations before attackers do.

A comprehensive security scanner for containers, Kubernetes, Terraform, and more. Detects vulnerabilities, misconfigurations, and secrets in your cloud-native infrastructure.

A rules engine for managing AWS, Azure, and GCP resources. Enables policy-as-code for enforcing security controls on cloud storage, including encryption, access restrictions, and data classification.

An AWS IAM security auditing tool that identifies permissions that make your account vulnerable to privilege escalation. Essential for least-privilege enforcement.

A static code analysis tool for infrastructure-as-code. Scans Terraform, CloudFormation, Kubernetes, and other IaC files for security misconfigurations and compliance violations.

AWS's managed security event data lake that enables you to aggregate, analyze, and investigate event data from across your AWS environment for security monitoring.

The definitive set of security configuration guidelines for major cloud platforms. Provides prescriptive recommendations for securing AWS, Azure, and GCP environments.

A comprehensive guide and toolset for securing serverless applications. Covers function permissions, environment variables, and API gateway configurations.

The industry standard for secrets management across cloud and on-premises environments. Provides secure storage, dynamic secrets generation, and encryption as a service.

A comprehensive zero-trust network access solution that replaces traditional VPNs. Provides secure access to applications, secure web gateway, and email security.

A developer-first security platform that finds and fixes vulnerabilities in your dependencies, containers, and infrastructure as code. Integrates seamlessly with CI/CD pipelines.

A multi-cloud security auditing tool that provides a comprehensive view of your cloud environment's security posture. Generates detailed reports with actionable recommendations.

Checks whether Kubernetes is deployed according to security best practices as defined by the CIS Kubernetes Benchmark. Essential for hardening your K8s clusters.

A specialized tool for scanning Amazon S3 buckets for security issues. Identifies public buckets, encryption status, and access control misconfigurations.

A tool for analyzing AWS IAM permissions and identifying potential privilege escalation paths. Visualizes trust relationships and helps identify overly permissive roles.

A security scanner for Terraform code that detects potential security issues before deployment. Provides clear, actionable remediation guidance.

Microsoft's cloud-native SIEM that provides intelligent security analytics across your entire enterprise. Integrates with Microsoft 365 and other cloud services for comprehensive threat detection.

A cybersecurity control framework for cloud computing developed by the Cloud Security Alliance. Provides a comprehensive set of controls mapped to multiple compliance standards.

A security library for serverless functions that provides runtime protection against common attacks. Works with AWS Lambda, Azure Functions, and Google Cloud Functions.

A fully managed service that helps you protect access to your applications, services, and IT resources. Automatically rotates, manages, and retrieves secrets.

A managed network firewall service that provides fine-grained network traffic filtering across your VPCs. Protects against common network vulnerabilities.

A cloud-based code analysis service that detects bugs, vulnerabilities, and code smells. Provides continuous inspection of your code quality and security.

A cloud security scanning tool that identifies security risks across AWS, Azure, Google Cloud, and Oracle Cloud. Offers both open-source and commercial versions.

A cloud-native runtime security tool that monitors application behavior and detects anomalous activity. Provides deep visibility into container and Kubernetes workloads.

A comprehensive infrastructure-as-code scanner that supports Terraform, Kubernetes, AWS CloudFormation, Ansible, and more. Detects security vulnerabilities, compliance issues, and infrastructure misconfigurations.

Google Cloud's security analytics platform that provides unlimited log retention and machine learning-powered threat detection. Designed for large-scale security operations.

The official U.S. government guidance on cloud security architecture. Provides a comprehensive framework for securing cloud deployments across all deployment models.

Microsoft's cloud service for securely storing and accessing secrets, keys, and certificates. Provides centralized key management and hardware security module (HSM) backing.

A cloud-native network security service that provides built-in high availability and unrestricted cloud scalability. Offers threat intelligence-based filtering.

A comprehensive security suite for GitHub that includes secret scanning, dependency scanning, code scanning, and security advisories. Essential for secure DevOps workflows.