cloud-security-posture-management

Query and Provision Cloud Infrastructure using an extensible SQL based grammar

The following is a simple example of how LLMs and langchain agents can simplify asking questions to understand the security posture of a cloud environment.

CloudCustodian Rules engine for cloud security and governance, DSL in yaml for policies to query, filter, and take actions on resources

Unofficial Prowler server CLI ☁️ 💻

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Cloud Native Application Protection Platform (CNAPP) in Cybersecurity

Cloud Security Posture Management Tool ☁️ 🔬

AWS hesapları için terminal tabanlı cloud security ve misconfiguration tarama aracı (CSPM).

Cloud Security Posture Management (CSPM) platform that maps AWS misconfigurations to MITRE ATT&CK techniques, attack paths, blast radius risk, and CIS/NIST/SOC2/PCI compliance controls.

Dependency-free cloud configuration posture scanner for safe exported-inventory reviews

Safe, reproducible misconfigured resource creator using terraform scenarios for testing cloud-security detections in disposable cloud environments.

Query and Provision Cloud Infrastructure using an extensible SQL based grammar

Automated AWS compliance engine for CIS Benchmark checks, security posture reporting, PDF evidence, and Slack alerts using Python and Boto3.

Python AWS security posture scanner for IAM, S3, EC2, CloudTrail, RDS, KMS, VPC, and Lambda with risk scoring, Security Hub mappings, and JSON/HTML/SARIF reporting.

AWS cloud security posture monitor with evidence-driven findings and remediation workflows

Experimental research project on cloud compliance analysis using Knowledge Graphs, Neo4j and LLM-based Text-to-Cypher.

A heuristic risk scorer for cloud assets leveraging MITRE ATT&CK mappings and tags to evaluate and score risks. This tool helps in identifying, prioritizing, and mitigating potential vulnerabilities within cloud environments.

Repository name: cloudsentinel Description: Modular zero-cost AWS security posture scanner with contextual risk scoring, compliance mapping, remediation simulation, and automated testing. Visibility: Public

Evident.io — independent third-party profile of a public API surface, by API Evangelist. Evident.io was a cloud security posture management company, founded in 2013, best known for the Evident Security Platform (ESP) — an agentless SaaS service that continuously monitored Amazon Web Services (and later Microsoft Azure) accounts for security misconf

AWS Security Hub — independent third-party profile of a public API surface, by API Evangelist. AWS Security Hub is a cloud security posture management (CSPM) service that aggregates, organizes, and prioritizes security findings from AWS services like Amazon GuardDuty, Inspector, and Macie, as well as supported third-party products.