Alternatives and similar repositories for cloud-security-remediation-guides

Users that are interested in cloud-security-remediation-guides are comparing it to the libraries listed below

• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆752Updated 2 years ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆538Updated 4 months ago
• Funkmyster / awesome-cloud-security
  A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
  ☆654Updated 8 months ago
• cider-security-research / top-10-cicd-security-risks
  ☆423Updated 3 years ago
• ramimac / aws-customer-security-incidents
  A repository of breaches of AWS customers
  ☆793Updated this week
• SummitRoute / csp_security_mistakes
  This repo has been replaced by https://www.cloudvulndb.org
  ☆727Updated 3 years ago
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆760Updated last year
• OWASP / DevSecOpsGuideline
  The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
  ☆1,011Updated 3 weeks ago
• hashishrajan / cloud-security-vulnerabilities
  List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud…
  ☆370Updated 2 years ago
• awslabs / aws-security-assessment-solution
  An AWS tool to help you create a point in time assessment of your AWS account using Prowler.
  ☆587Updated 2 months ago
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆397Updated last year
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆557Updated this week
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆342Updated 3 years ago
• jonrau1 / ElectricEye
  ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…
  ☆1,032Updated this week
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆292Updated last year
• krol3 / container-security-checklist
  Checklist for container security - devsecops practices
  ☆1,611Updated 4 months ago
• awslabs / aws-cloudsaga
  AWS CloudSaga - Simulate security events in AWS
  ☆472Updated this week
• jassics / awesome-aws-security
  Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS…
  ☆1,492Updated 8 months ago
• brianlam38 / AWS-Certified-Security-Specialty
  AWS Certified Security Specialty (2020) course notes
  ☆121Updated 5 years ago
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆373Updated 4 months ago
• doitintl / secure-gcp-reference
  Best practice example for secure and compliant Google Cloud Platform infrastructure
  ☆104Updated 3 years ago
• Vinum-Security / kubernetes-security-checklist
  Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, wor…
  ☆484Updated 4 years ago
• joshlarsen / aws-recon
  Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
  ☆554Updated 6 months ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆105Updated 2 years ago
• OWASP / www-project-kubernetes-top-ten
  OWASP Foundation Web Respository
  ☆599Updated 2 months ago
• ine-labs / GCPGoat
  GCPGoat : A Damn Vulnerable GCP Infrastructure
  ☆427Updated last year
• awslabs / threat-composer
  A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
  ☆663Updated last week
• awslabs / aws-automated-incident-response-and-forensics
  ☆401Updated 2 years ago
• jonrau1 / AWS-DevSecOps-Factory
  Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native ser…
  ☆72Updated 4 years ago
• aws-samples / aws-incident-response-playbooks
  ☆1,042Updated 5 months ago