cnspec

Mondoo's open-source scanner that assesses the security and compliance posture of infrastructure across its lifecycle — cloud accounts, Kubernetes clusters, containers, hosts, SaaS and IaC. Uses declarative policy-as-code packs mapped to standards and benchmarks, and can run ad hoc or continuously to gate misconfigurations and vulnerabilities.