Alternatives and similar repositories for active-assist

Users that are interested in active-assist are comparing it to the libraries listed below

• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 8 months ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆18Updated last year
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• gyrospectre / squyre
  Security Alert Decoration
  ☆27Updated 3 months ago
• tenchi-security / camp
  CloudSplaining on AWS Managed Policies
  ☆44Updated 2 months ago
• somethingnew2-0 / SimpleCSPM
  GCP CSPM using Google Sheets
  ☆37Updated 7 months ago
• kmcquade / OWASP-YouTube-2021
  Deliberately vulnerable AWS resources for security assessment demos
  ☆32Updated 3 years ago
• zenzora / awesome-gcpsec
  ☆14Updated 3 years ago
• vectra-ai-research / log4j-aws-sandbox
  A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform
  ☆11Updated 3 years ago
• allisonis / gcp-iam-sentinel-examples
  ☆28Updated 5 years ago
• DataDog / workload-security-evaluator
  ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…
  ☆36Updated last year
• KatTraxler / gcpdocs
  Repository to archive GCP Documentation for local use
  ☆16Updated 9 months ago
• carta / krang
  Knowledge Report Alert & Normalization Generator
  ☆27Updated last year
• PaloAltoNetworks / github-oidc-utils
  ☆37Updated 6 months ago
• primeharbor / breaches.cloud
  https://breaches.cloud
  ☆42Updated last year
• tradichel / SecurityMetricsAutomation
  ☆41Updated 3 months ago
• mercari / gcp-sa-key-checker
  A recon tool for GCP Service Account Keys that requires no permissions
  ☆24Updated 6 months ago
• steeve85 / tfviz
  Visualize your Terraform files
  ☆34Updated 5 years ago
• adanalvarez / TrailAlerts
  TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events i…
  ☆51Updated 6 months ago
• twilio-labs / gordon
  Gordon is status check Github app to enforce and validate about.yaml file specifications in a repository during pull requests to drive co…
  ☆20Updated 9 months ago
• Permiso-io-tools / SkyScalpel
  ☆47Updated last year
• onetwopunch / gcptree
  Like the unix tree command but for GCP Org Heirarchy
  ☆27Updated 4 years ago
• naman16 / AWS-Security-Guardrails-TF
  ☆31Updated last year
• Permiso-io-tools / cloudtail
  ☆31Updated 4 months ago
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆42Updated 2 years ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆94Updated 3 months ago
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆45Updated 5 years ago
• CloudWanderer-io / PolicyGlass
  PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…
  ☆60Updated 3 years ago