cspm

There are 12 repositories under cspm topic.

steampipe
turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
aws azure cis cloud cnapp cspm devops devsecops etl gcp golang kubernetes postgresql postgresql-fdw security sql sqlite steampipe terraform zero-etl
Language:Go 6791
cloudquery
cloudquery / cloudquery
The open source high performance ELT framework powered by Apache Arrow
aws gcp azure sql data-integration elt etl etl-framework bigquery data-collection data-engineering kubernetes data airbyte github-api data-analysis google go cspm attack-surface-management
Language:Go 5758
ThreatMapper
deepfence / ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
cloud-native cloudsecurity cnapp compliance containers cspm cwpp devops devsecops hacktoberfest kubernetes observability registry-scanning scanning-tool secops security-tools threat-analysis vulnerability-detection vulnerability-management vulnerability-scanners
Language:TypeScript 4752
aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
alibaba aqua aws azure cloud cspm gcp oci oracle security security-audit
Language:JavaScript 3289
HummerRisk / HummerRisk
HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
cloud-custodian cloud-native cloud-native-security compliance compliance-as-code cspm k8s-security kubernetes-security prowler sbom security trivy vulnerability
Language:Java 1776
fixinventory
someengineering / fixinventory
Fix Inventory consolidates user, resource, and configuration data from your cloud environments into a unified, graph-based asset inventory.
aws cnapp cspm cybersecurity digitalocean gcp infrastructure-as-code open-source security security-automation
Language:Python 1580
cli
cloudgraphdev / cli
The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
aws azure cis cloud cspm developer-tools devops devops-tools gcp graphql iso kubernetes nist pci security security-audit security-tools tencent
Language:TypeScript 876
Zeus-Labs / ZeusCloud
Open Source Cloud Security
aws blueteam bugbounty ciem cis cloud cloudsecurity cnapp cspm cwpp devsecops pentesting security security-tools cybersecurity infosec
Language:TypeScript 683
selefra / selefra
The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).
aws azure chatgpt cloud cspm devops finops gcp golang google infrastructure-as-code kubernetes openai policy-as-code terraform
Language:Go 518
stackql
stackql / stackql
Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework
asset-management cloud cloud-automation cloud-config cloud-operations cloud-security cspm devops devsecops infrastructure-as-code openapi3 sql stackql hacktoberfest
Language:Go 472
OpenCSPM / opencspm
Open Cloud Security Posture Management Engine
cloud gcp aws kubernetes cspm security security-audit
Language:Ruby 330
powerpipe
turbot / powerpipe
Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.
aws azure cis cloud cnapp cspm dashboards devops devsecops duckdb gcp golang hcl kubernetes mysql postgresql security sql sqlite terraform
Language:TypeScript 228
magpie
openraven / magpie
A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.
security-tools aws cloud cspm gcp security-audit security security-vulnerability security-scanner security-testing cloudsecurity
Language:Java 168
rpCheckup
goldfiglabs / rpCheckup
rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.
aws aws-security cloudsecurity cspm ec2 infosec resourcepolicy s3
Language:Go 156
someengineering / cloud-security-list
A list of cloud security tools and vendors.
attack-surface-management aws azure cnapp cspm dspm gcp security siem
119
CloudDefenseAI / falco_extended_rules
Curating Falco rules with MITRE ATT&CK Matrix
cloudsecurity devops devsecops kuberentes security cnapp cspm security-tools threat-analysis vulnerability-detection vulnerability-scanners falco malware threat threat-modeling container-security kubernetes-security malware-analysis workload-security zero-day
Language:Python 73
introspector
goldfiglabs / introspector
A schema and set of tools for using SQL to query cloud infrastructure.
aws sql database-schema security-groups iam postgres infrastructure-as-deployed secops security-tools compliance-as-code compliance-automation cloud-infrastructure cloud-security cspm cloudsecurity aws-security infosec devsecops security cmdb
Language:Python 66
PaloAltoNetworks / prisma_channel_resources
A collection of technical and sales resources related to Prisma Cloud Compute and Prisma Cloud Enterprise created for the PANW Channel Partner Ecosystem and other engineers working with the solution
prisma prisma-cloud cloudnativesecurity containersecurity twistlock redlock aporeto cspm cwp cws cnapp devsecops
Language:Shell 64
elastic / cloudbeat
Analyzing Cloud Security Posture
cloud golang cspm vulnerability-detection vulnerability-scanners
Language:Go 39
somethingnew2-0 / SimpleCSPM
GCP CSPM using Google Sheets
google sheets cspm gcp googlesheets security google-cloud-platform
Language:JavaScript 33
infraql / infraql
Query and Provision Cloud Infrastructure using an extensible SQL based grammar
cloud sql google-cloud-platform infrastructure-as-code query-language asset-management cloud-inventory automation cspm cloud-security-posture-management
Language:Go 23
SecurityChecklists
vikrum / SecurityChecklists
The SaaS CTO Security Checklist Redux, The DevOps Security Checklist, and The Personal Infosec & Security Checklist
infosec cybersecurity startup cloudsecurity saas-security saas security checklist cspm secops devsecops security-checklist personal-security security-audit security-checklists
23
ca-risken / doc
RISKEN is a monitoring tool for visualizing security risks.
security risken cspm
Language:Makefile 20
samvas-codes / cspm-gpt
The following is a simple example of how LLMs and langchain agents can simplify asking questions to understand the security posture of a cloud environment.
cspm docker langchain python aws azure chatgpt cloud cloud-security-audit cloud-security-posture-management gcp neo4j openai policy-as-code gpt cloud-security cybersecurity devsecops open-source
Language:Python 19
CrowdStrike / cloud-resource-estimator
Cloud deployment size calculation utilities
cspm cspm-benchmark benchmark horizon crowdstrike falcon crowdstrike-horizon crowdstrike-falcon cloud-auditing
Language:Python 17
ollionorg / cloud-custodian-aws-policies
CloudCustodian Rules engine for cloud security and governance, DSL in yaml for policies to query, filter, and take actions on resources
aws c7n cloudcustodian custodian auto-remediation automation cloud cloud-security cloud-security-audit cloud-security-posture-management compliance cspm governance policies security-policies security-tools
15
OpenCSPM / opencspm-darkbit-community-controls
OpenCSPM Community Controls
cspm cloud security aws gcp kubernetes
Language:Ruby 14
aws-samples / inventory-management-for-amazon-ec2
Inventory Management for amazon EC2 Demo CDK
aws cspm ec2 security siem
Language:Python 9
PaloAltoNetworks / learn-prisma-cloud-automation
A set of tutorials to learn how to automate various Prisma Cloud tasks.
prisma automation ccs cloud cnapp cns compute cspm cwp ciem labs tutorial prisma-cloud prismacloud
Language:HCL 9
OpenCSPM / opencspm-darkbit-enterprise-controls
OpenCSPM Enterprise Controls
cspm cloud security aws gcp kubernetes
8
pystackql
stackql / pystackql
Python interface for StackQL
python stackql analytics cloud cspm infrastructure-as-code pypi saas sql pystackql
Language:Python 8
openraven / aws-api-discovery
AWS discovery via the AWS API
aws aws-api aws-discovery cspm
Language:Java 7
stackql / setup-stackql
Sets up the stackql cli in your GitHub Actions workflow.
infrastructure-as-code sql stackql cspm
Language:JavaScript 7
trendmicro / conformity-migration-tool
Migrates your visiblity information in cloudconformity.com to cloudone.trendmicro.com
aws azure cloudconformity cloudone conformity cspm migration
Language:Python 6
openraven / aws-config-discovery
AWS Discovery using AWS Config
aws aws-config aws-discovery cspm
Language:Kotlin 5
plerionhq / plerion-asset-counter
A script which returns the number of assets Plerion will monitor over a cloud provider's account
cspm
Language:JavaScript 5

cspm

turbot / steampipe

cloudquery / cloudquery

deepfence / ThreatMapper

aquasecurity / cloudsploit

HummerRisk / HummerRisk

someengineering / fixinventory

cloudgraphdev / cli

Zeus-Labs / ZeusCloud

selefra / selefra

stackql / stackql

OpenCSPM / opencspm

turbot / powerpipe

openraven / magpie

goldfiglabs / rpCheckup

someengineering / cloud-security-list

CloudDefenseAI / falco_extended_rules

goldfiglabs / introspector

PaloAltoNetworks / prisma_channel_resources

elastic / cloudbeat

somethingnew2-0 / SimpleCSPM

infraql / infraql

vikrum / SecurityChecklists

ca-risken / doc

samvas-codes / cspm-gpt

CrowdStrike / cloud-resource-estimator

ollionorg / cloud-custodian-aws-policies

OpenCSPM / opencspm-darkbit-community-controls

aws-samples / inventory-management-for-amazon-ec2

PaloAltoNetworks / learn-prisma-cloud-automation

OpenCSPM / opencspm-darkbit-enterprise-controls

stackql / pystackql

openraven / aws-api-discovery

stackql / setup-stackql

trendmicro / conformity-migration-tool

openraven / aws-config-discovery

plerionhq / plerion-asset-counter