Tools for compliance

Safely simulate malicious network traffic.

Small, portable ATT&CK detection tests.

Digital forensics platform.

Python AST-based security linter.

Web-based SSH bastion and key manager.

Policy-as-code for infrastructure.

Visualize AWS environments.

Sign and verify container images.

Lightning-fast XSS sanitizer.

Component analysis platform.

Automated detection lab environment.

Firmware security analyzer.

Ban hosts that fail auth too often.

Open vulnerability management platform.

Osquery-powered device management.

Aggregate software security metadata.

Secret detection in Git repos.

Mandiant's password-cracking frontend.

Open log management.

Vulnerability scanner for containers and filesystems.

Windows hardening for high-risk users.

Open-source digital forensics processor.

Open-source adversary emulation platform.

Open-source secrets + cert + PAM platform.