Alternatives and similar repositories for utils

Users that are interested in utils are comparing it to the libraries listed below

• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 4 months ago
• tenchi-security / camp
  CloudSplaining on AWS Managed Policies
  ☆44Updated this week
• SummitRoute / imdsv2_wall_of_shame
  List of vendors that do not allow IMDSv2 enforcement
  ☆143Updated last year
• turbot / steampipe-mod-aws-perimeter
  Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrust…
  ☆112Updated 3 weeks ago
• orcasecurity / orca-toolbox
  ☆117Updated 2 months ago
• ovotech / cloud-key-rotator
  A Golang program to rotate AWS & GCP account keys
  ☆66Updated 2 months ago
• CloudWanderer-io / PolicyGlass
  PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…
  ☆60Updated 3 years ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆143Updated 3 months ago
• primeharbor / sensitive_iam_actions
  Crowdsourced list of sensitive IAM Actions
  ☆152Updated 9 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• arnica-ext / GitGoat
  GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…
  ☆170Updated 6 months ago
• tuladhar / cleanup-aws-access-keys
  A cloud security tool to search and clean up unused AWS access keys, written in Go.
  ☆50Updated 2 years ago
• onemorepereira / aws-sso-reporter
  AWS SSO Reporter
  ☆54Updated 2 months ago
• chainguard-dev / justtrustme
  ☆55Updated 2 weeks ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated 2 weeks ago
• primeharbor / aws-fast-fixes
  Scripts to quickly fix security and compliance issues
  ☆27Updated last year
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆102Updated last year
• google / localtoast
  ☆113Updated last week
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆31Updated 9 months ago
• fwdcloudsec / known_aws_accounts
  List of known AWS accounts
  ☆219Updated this week
• marco-lancini / k8s-lab-plz
  Modular Kubernetes lab which provides an easy and streamlined way to deploy a test cluster with support for different components.
  ☆52Updated last year
• iacsecurity / tool-compare
  ☆285Updated 2 years ago
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆87Updated last year
• AirWalk-Digital / AWSXenos
  AWSXenos will list all the trust relationships in all the IAM roles, S3 buckets, and more
  ☆64Updated 4 months ago
• clutchsecurity / federator
  Terraform templates for CI/CD to Cloud federation and Cloud2Cloud IAM federations
  ☆64Updated 8 months ago
• aquia-inc / scpkit
  SCP management tool
  ☆132Updated last year
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆174Updated 8 months ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆139Updated 3 years ago
• suzuki-shunsuke / tfprovidercheck
  CLI to prevent malicious Terraform Providers from being executed. You can define the allow list of Terraform Providers and their versions…
  ☆87Updated last week
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago