Awesome AWS Security
Section: Tools of Trade · Open-source AWS security scanner that detects attack chains and generates remediation code. 80+ checks, CIS/SOC 2 compliance.
FreshScore 81
Entry
cloud-audit
Appears in 4 awesome lists
Fast, opinionated AWS security scanner with 47 curated checks. Each finding includes copy-paste remediation in AWS CLI and Terraform. Features attack chain detection and a diff command for CI/CD pipeline gating.
Open github.comgebalamariusz/cloud-audit
Found in these lists
Awesome Cloud Native
Section: Security & Compliance · Fast, opinionated AWS security scanner with 47 curated checks. Each finding includes copy-paste remediation in AWS CLI and Terraform. Features attack chain detection and a diff command for CI/CD pipeline gating.
FreshScore 87
Awesome Site Reliability Engineering Tools
Section: Continuous Monitoring · AWS security auditing CLI that runs 17 checks across IAM, S3, EC2, VPC, and RDS with built-in remediation engine generating AWS CLI commands and Terraform snippets.
ActiveScore 73
Awesome Terraform
Section: Tools · AWS security auditing CLI with remediation engine that generates Terraform code for fixing misconfigurations.
FreshScore 89
Often listed next to it
Prometheus
is a free software application used for event monitoring and alerting. It records real-time metrics in a time series database (allowing for high dimensionality) built using a HTTP pull model, with flexible queries and real-time alerting.
In 13 listsDetails
Grafana
is an analytics platform that enables you to query and visualize data, then create and share dashboards based on your visualizations. Easily visualize metrics, logs, and traces from multiple sources such as Prometheus, Loki, Elasticsearch, InfluxDB, Postgres, Fluentd, Fluentbit, Logstash and many…
In 11 listsDetails
VictoriaMetrics
fast, resource-effective and scalable open source time series database. May be used as long-term remote storage for Prometheus. Supports PromQL.
In 10 listsDetails
Darkmoon
🟢⚠️ — Autonomous AI penetration-testing platform that orchestrates specialized web, AD, Kubernetes, CMS, and framework agents through an MCP-controlled Docker toolbox with local privacy-tokenization for sensitive target data. — note: GPL-3.0 licensed; heavy Docker/LLM stack, use only for…;…
In 10 listsDetails
Trivy
A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts, Suitable for CI. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.). Checks containers and filesystems.
In 9 listsDetails
Datadog
Datadog is a monitoring service for IT, Operations and Development teams who write and run applications at scale, and want to turn the massive amounts of data produced by their apps, tools and services into actionable insight.
In 8 listsDetails
Healthchecks
Listen for pings and sends alerts when pings are late. (Source Code) BSD-3-Clause Python/Docker
In 7 listsDetails