A micro InSpec baseline to check for insecure or public s3 buckets in your VPC
☆14Jan 17, 2025Updated last year
Alternatives and similar repositories for aws-s3-baseline
Users that are interested in aws-s3-baseline are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- (WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline☆24Dec 14, 2025Updated 9 months ago
- CLI tool for fetching, managing, and exporting CIS benchmarks from CIS WorkBench☆28Apr 19, 2026Updated 5 months ago
- InSpec profile for Microsoft Windows 10, against DISA's Microsoft Windows 10 Security Technical Implementation Guide (STIG) Version 1, Re…☆15Jan 9, 2025Updated last year
- Landing Page Content/Builder for MITRE Security Automation Framework☆29Sep 16, 2026Updated 3 weeks ago
- STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3☆22Jan 15, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Security Results Viewer for the web with storage, teams and history☆35Jan 19, 2023Updated 3 years ago
- This project is a demo of the terraform work with the integration of Chef Inspec to be able to carry out IAC and later verification of th…☆10Mar 3, 2021Updated 5 years ago
- InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 7, against DISA's Red Hat Enterprise Linux 7 Security Tec…☆15Dec 15, 2025Updated 9 months ago
- DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications☆34Feb 5, 2022Updated 4 years ago
- ☆10Jun 20, 2023Updated 3 years ago
- This repository contains several courses to learn about using and developing SAF capabilities☆16Updated this week
- Heimdall Lite 2.0 is a JavaScript based security results viewer and review tool supporting multiple security results formats, such as: In…☆21Feb 11, 2022Updated 4 years ago
- A web application to streamline the development of STIGs from SRGs☆87Sep 25, 2026Updated 2 weeks ago
- Molecule Inspec Verifier Plugin☆11Jan 2, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Experimental CPSA -- the Cryptographic Protocol Shapes Analyzer experimental version☆24Jun 20, 2026Updated 3 months ago
- ***MERGED: SEE README:*** The XCCDF to InSpec parser scans and extracts the controls defined in the DISA XCCDF STIG XML documents and con…☆13Nov 23, 2018Updated 7 years ago
- (WIP) A set of training material and guides for using inspec☆15Jul 19, 2019Updated 7 years ago
- Ansible playbooks that will without any user interaction provision Check Point Security Management server (SM) or Multi-Domain Management…☆11Jan 28, 2022Updated 4 years ago
- eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise…☆52May 6, 2026Updated 5 months ago
- InSpec Profile for the EL7 DISA STIG☆24Apr 17, 2023Updated 3 years ago
- A Gradle plugin for checking whether an .apk or an .aar contains OpenSSL versions with known vulnerabilities☆13Nov 28, 2016Updated 9 years ago
- Looks up details on a public IPV4 address against ip-info and blacklist-search sites. Providing a reputation check.☆11Oct 16, 2021Updated 4 years ago
- Migrating S3 Buckets Across AWS Accounts☆59Jun 25, 2021Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Check Safety of SSH Public Keys☆12Oct 8, 2022Updated 4 years ago
- MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.☆67Apr 1, 2024Updated 2 years ago
- A tool evaluates security configurations of a given PE based on SDL without source code☆15Jul 6, 2014Updated 12 years ago
- ddos-checker is a tool used to perform a test on a website from a DDOS attack to find security gaps in a website.☆15Oct 16, 2025Updated 11 months ago
- Checking for leaked passwords through haveibeenpwned v2 API using the hash-range checker☆12Feb 7, 2024Updated 2 years ago
- Elf checksec in Go.☆13May 10, 2022Updated 4 years ago
- Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk☆14Mar 4, 2019Updated 7 years ago
- Jam3 quality advisor. Integrates checking for best practices at Jam3☆12Apr 21, 2023Updated 3 years ago
- BSentry is a comprehensive collection of additional security checks designed to enhance your Burp Suite experience.☆12Aug 16, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Lambda function to run cfn_nag in CodePipeline☆10Jun 22, 2021Updated 5 years ago
- Baseline, check and correct your SQL Database Security☆12Mar 9, 2022Updated 4 years ago
- Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.☆14Jul 19, 2021Updated 5 years ago
- A list of important security checks for GitHub individual and organization accounts☆16Jan 1, 2018Updated 8 years ago
- AWS security scanning checks in a container☆13Apr 11, 2016Updated 10 years ago
- Sample terraform repo with multiple resources and a workflow that uses tools to automate cost management, security checks, best practices…☆10Jun 24, 2021Updated 5 years ago
- ARCHIVED - Tool to perform security check on dependencies embedded in given Go binary☆11Nov 26, 2024Updated last year