Tools for cloud

Open-source security data lake on AWS.

Template-based vulnerability scanner.

Dependency vulnerability scanner.

Open-source threat modeling.

Policy-as-code across the stack.

Evaluate IAM permissions in AWS.

Open-source AWS exploitation framework.

Multi-cloud security posture.

Find misconfigured object storage buckets.

Multi-cloud security auditing.

Open-source SOAR.

Local-first threat hunting over logs you already have

Open-source SCA + IaC scanner.

Build vulnerable instrumented labs.

Cloud adversary emulation.

Sigma-based threat hunting and timeline generator for cloud logs.

Generate SBOMs from containers and source code.

Microsoft's Sysmon, on Linux.

Cross-platform O365 / AAD attack framework.

Send phishing via Microsoft Teams.

Zero-trust access for SSH, K8s and more.

Cloud-native secrets manager.

eBPF-based runtime security.

Open-source cloud-native protection platform.