aquasecurity / cloud-security-remediation-guidesLinks
Security Remediation Guides
☆738Updated last month
Alternatives and similar repositories for cloud-security-remediation-guides
Users that are interested in cloud-security-remediation-guides are comparing it to the libraries listed below
Sorting:
- A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure☆723Updated last year
- A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.☆647Updated 3 months ago
- Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.☆518Updated last week
- ☆418Updated 2 years ago
- This repo has been replaced by https://www.cloudvulndb.org☆727Updated 3 years ago
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆960Updated 6 months ago
- A repository of breaches of AWS customers☆778Updated last month
- Threat matrix for CI/CD Pipeline☆758Updated last year
- List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud…☆367Updated 2 years ago
- ☆537Updated last week
- OWASP Domain Protect - prevent subdomain takeover☆398Updated 8 months ago
- OWASP Foundation Web Respository☆591Updated last year
- CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.☆288Updated last year
- An AWS tool to help you create a point in time assessment of your AWS account using Prowler.☆565Updated last week
- Checklist for container security - devsecops practices☆1,589Updated last year
- Open Cloud Security Posture Management Engine☆342Updated 3 years ago
- An open project to list all publicly known cloud vulnerabilities and CSP security issues☆355Updated this week
- A simple threat modeling tool to help humans to reduce time-to-value when threat modeling☆615Updated last week
- AWS Certified Security Specialty (2020) course notes☆122Updated 4 years ago
- ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…☆1,010Updated last week
- Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.☆549Updated 2 months ago
- Best practice example for secure and compliant Google Cloud Platform infrastructure☆104Updated 2 years ago
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆103Updated last year
- A curated list of awesome CI CD security resources☆612Updated 10 months ago
- GCPGoat : A Damn Vulnerable GCP Infrastructure☆410Updated 10 months ago
- Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, wor…☆479Updated 3 years ago
- Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS…☆1,444Updated 4 months ago
- Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native ser…☆72Updated 3 years ago
- Threat model for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach☆157Updated last year
- Automated Attack Simulation in the Cloud, complete with detection use cases.☆593Updated 9 months ago