This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

python aws security security-audit cloud azure iam gcp forensics compliance hardening security-hardening hacktoberfest gdpr multi-cloud security-tools cloudsecurity devsecops cis-benchmark cspm

• Updated Nov 12, 2026
• Python

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

docker kubernetes infrastructure security container hacking owasp k8s cloud-native pentesting blueteam cloudsecurity devsecops cloud-security redteam container-security vulnerable-app kubernetes-security kubernetes-goat

• Updated Apr 16, 2026
• HTML

Open Source Cloud Native Application Protection Platform (CNAPP)

kubernetes devops containers secops cloud-native compliance vulnerability-detection vulnerability-management observability vulnerability-scanners threat-analysis security-tools cloudsecurity devsecops scanning-tool registry-scanning cspm cwpp cnapp

• Updated Jun 1, 2026
• TypeScript

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

kubernetes infrastructure aws security devops terraform architecture iac infrastructure-as-code scans aws-security security-tools cloudsecurity devsecops cloud-security sast azure-security gcp-security terrascan security-violations

• Updated Nov 20, 2025
• Go

A secure low code deception runtime framework, leveraging AI for System Virtualization.

go security framework mcp honeypot cybersecurity research-project llama cloudnative whitehat acis cloudsecurity deception decoys llm llm-security llm-honeypot mcp-honeypot agentic-ai-security preemptive-cybersecurity

• Updated Nov 3, 2026
• Go

IAM Least Privilege Policy Generator

aws security cloud iam salesforce hacktoberfest aws-security iam-policy cloudsecurity

• Updated Nov 10, 2026
• Python

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

docker kubernetes awesome tools cybersecurity cloud-native cloudnative cloudsecurity cloud-security awesome-cloud-security

• Updated Oct 28, 2024

This repo includes Books and imp notes related to GCP, Azure, AWS, Docker, K8s, and DevOps. More, exam and interview prep notes.

linux docker kubernetes jenkins aws ansible devops notes azure containers terraform gcp cicd devops-tools cloudnative cloudsecurity cloudcomputing devsecops multicloud azure-devops

• Updated Jun 24, 2024

A tool for quickly evaluating IAM permissions in AWS.

python aws iam botocore cloudsecurity

• Updated Aug 2, 2024
• Python

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

cli security devops hacktoberfest cloudsecurity asset-management

• Updated Nov 9, 2026
• Go

T Wiki 云安全知识文库，可能是国内首个云安全知识文库？

blog security cloud wiki cloudnative cloudsecurity

• Updated Dec 21, 2024
• Dockerfile

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

devops cloud cloudformation serverless terraform tagging iac infrastructure-as-code hacktoberfest cloudsecurity

• Updated Nov 8, 2026
• Go

Open Source Cloud Security

aws security cis cloud cybersecurity infosec pentesting bugbounty blueteam security-tools cloudsecurity devsecops cspm cwpp cnapp ciem

• Updated Oct 26, 2023
• TypeScript

LC（List Cloud）是一个多云攻击面资产梳理工具

cloud cybersecurity cloudsecurity

• Updated Oct 6, 2024
• Go

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

security terraform gcp aws-security cloudsecurity cloud-security azure-security gcp-security kubernetes-security

• Updated Nov 30, 2022
• HCL

一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具

mcp cybersecurity cloudsecurity alibaba-cloud tencent-cloud public-cloud mcp-server

• Updated Feb 3, 2026
• Go

文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.

security cloud article introduction cloudsecurity cloud-security

• Updated Feb 29, 2024
• Shell

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

aws aws-security cloudsecurity devsecops

• Updated Jul 17, 2023
• Python

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfa…

aws toolkit azure gcp python3 cloudsecurity azuread redteam-tools

• Updated Feb 21, 2025
• CSS

Microsoft Sentinel SOC Operations

microsoft security azure incident-response secops threat-hunting siem hunting soc ir cloudsecurity threat-intelligence azure-sentinel microsoft-sentinel

• Updated Jul 24, 2026
• PowerShell