Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Free Security and Hacking eBooks

A Central Control Plane for AWS Permissions and Access

🛡️ Awesome Cloud Security Resources ⚔️

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

Automating situational awareness for cloud penetration tests.

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

PacBot (Policy as Code Bot)

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

The easiest way to access your cloud.

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.