awslabs / threat-composerView external linksLinks
A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
☆668Feb 7, 2026Updated last week
Alternatives and similar repositories for threat-composer
Users that are interested in threat-composer are comparing it to the libraries listed below
Sorting:
- This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.☆647Feb 8, 2026Updated last week
- AWS CloudSaga - Simulate security events in AWS☆472Feb 7, 2026Updated last week
- Example AWS Resource control policies to get started or mature your usage of AWS RCPs.☆197Feb 2, 2026Updated last week
- Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.☆270Updated this week
- An AWS tool to help you create a point in time assessment of your AWS account using Prowler.☆590Nov 12, 2025Updated 3 months ago
- Generates runbooks for GuardDuty findings☆38Jun 24, 2024Updated last year
- Example AWS Service control policies to get started or mature your usage of AWS SCPs.☆283Jan 14, 2026Updated last month
- Example policies demonstrating how to implement a data perimeter on AWS.☆190Jan 29, 2026Updated 2 weeks ago
- AWS Security Analytics Bootstrap enables customers to perform security investigations on AWS service logs by providing an Amazon Athena a…☆270Updated this week
- ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.☆559Updated this week
- Safer AWS SCP deployments via real-time monitoring☆56Sep 30, 2023Updated 2 years ago
- Automated Security Response on AWS is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a…☆463Updated this week
- An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRI…☆979Dec 28, 2025Updated last month
- A Pythonic framework for threat modeling☆1,103Updated this week
- Awesome secure by default libraries to help you eliminate bug classes!☆699Dec 6, 2025Updated 2 months ago
- Crowdsourced list of sensitive IAM Actions☆159Oct 29, 2024Updated last year
- This repository can be used to generate and evaluate findings detected by Amazon GuardDuty☆419Jan 7, 2026Updated last month
- Granular, Actionable Adversary Emulation for the Cloud☆2,252Feb 6, 2026Updated last week
- Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments☆141Jan 2, 2025Updated last year
- ☆1,049Aug 22, 2025Updated 5 months ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,707Aug 2, 2024Updated last year
- A tool for quickly evaluating IAM permissions in AWS.☆1,539Aug 2, 2024Updated last year
- Cloud Commotion intends to cause chaos to simulate security incidents☆145Jun 18, 2024Updated last year
- Bare minimum AWS Security Alerting and Secure by default Configuration☆511May 15, 2025Updated 9 months ago
- ☆116Updated this week
- ☆124May 26, 2025Updated 8 months ago
- Convert cloudtrail data to MITRE ATT&CK Sightings☆82Jul 25, 2022Updated 3 years ago
- Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix☆59Sep 7, 2023Updated 2 years ago
- Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized repo…☆2,180Feb 8, 2026Updated last week
- Agile Threat Modeling Toolkit☆723Nov 20, 2025Updated 2 months ago
- AWS honey token manager☆89Aug 1, 2024Updated last year
- An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and secur…☆172Feb 8, 2026Updated last week
- threatspec - continuous threat modeling, through code☆376Dec 30, 2020Updated 5 years ago
- ☆228Jan 29, 2026Updated 2 weeks ago
- AWS IAM linting library☆1,109Jan 7, 2026Updated last month
- ☆381Apr 18, 2024Updated last year
- A collection of documented and undocumented AWS API models☆53Nov 21, 2025Updated 2 months ago
- A repository of breaches of AWS customers☆794Jan 24, 2026Updated 3 weeks ago
- SCP management tool☆135Oct 23, 2023Updated 2 years ago