Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

The open source high performance ELT framework powered by Apache Arrow

Open Source Cloud Native Application Protection Platform (CNAPP)

Cloud Security Posture Management (CSPM)

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

Open Source Cloud Security

Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework

The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).

Open Cloud Security Posture Management Engine

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.

rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.

A list of cloud security tools and vendors.

Curating Falco rules with MITRE ATT&CK Matrix

A collection of technical and sales resources related to Prisma Cloud Compute and Prisma Cloud Enterprise created for the PANW Channel Partner Ecosystem and other engineers working with the solution

A schema and set of tools for using SQL to query cloud infrastructure.

Analyzing Cloud Security Posture