Stave finds compound attack paths that single-resource scanners miss. AWS security findings from configuration snapshots without any credentials.
☆45Oct 21, 2026Updated this week
Alternatives and similar repositories for stave
Users that are interested in stave are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Security configuration scanner for Claude Code☆45Oct 13, 2026Updated last week
- ☆20Sep 25, 2026Updated 3 weeks ago
- Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get a narrative answer with containment recommenda…☆24Jul 6, 2026Updated 3 months ago
- ☆22Jul 13, 2026Updated 3 months ago
- Bounded local runtime and policy boundary for coding agents☆21Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Run-scoped LLM observation proxy with an embedded Bifrost data plane☆18Aug 4, 2026Updated 2 months ago
- Simplified CloudTrail analysis for AI agents☆44Sep 16, 2026Updated last month
- A local daemon-backed AWS temporary credential broker, exposed over a Unix socket and controlled via CLI.☆21Oct 14, 2026Updated last week
- Tool to check the CloudTrail configuration and the services where trails are sent, to detect potential attacks to CloudTrail logging.☆13May 25, 2024Updated 2 years ago
- Open-source, self-hosted OSINT investigation platform: turn documents into a live, investigated entity graph. Autonomous agent, graph ana…☆94Sep 5, 2026Updated last month
- Tool for signing and verifying the integrity of CloudFormation templates☆15Aug 18, 2026Updated 2 months ago
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆67Jan 25, 2025Updated last year
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- MCP server for Tailscale, backed by the tailscale CLI and control-plane REST API☆14Oct 10, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆23Jan 7, 2026Updated 9 months ago
- An IAM Simulator that outputs detailed explains of how a request was evaluated.☆106Updated this week
- Force CloudFormation to generate a tree view for any stack☆18Sep 14, 2022Updated 4 years ago
- Tools and open datasets to support, sustain, and secure critical digital infrastructure.☆16Oct 15, 2026Updated last week
- A lightweight browser wrapper for private Tailscale apps — no full VPN client, no system-wide networking.☆18Updated this week
- Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.☆100Oct 11, 2026Updated last week
- AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM prox…☆51Updated this week
- [ARCHIVED] Public objects moved to OpenTideHQ/library☆17Sep 9, 2026Updated last month
- ☆40Jun 9, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Local, deterministic review of Git changes: weakened tests and CI gates, security boundaries, blast radius. CLI, GitHub Action, MCP serve…☆24Oct 12, 2026Updated last week
- Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the passwor…☆40May 7, 2023Updated 3 years ago
- Manage multiple AWS SSO organizations with separate config files☆24Mar 20, 2026Updated 7 months ago
- A sample repo showing Kubernetes running on a fleet of AWS Lambda MicroVMs, and the ability to SSH into MicroVMs☆48Jun 26, 2026Updated 3 months ago
- A PHP ETL solution for use with Laravel or Laravel-Zero☆22Apr 18, 2026Updated 6 months ago
- MCP server for understanding AWS spend☆126Apr 14, 2025Updated last year
- Putting a leash on naughty AWS permissions☆139Sep 5, 2025Updated last year
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆35Jul 28, 2026Updated 2 months ago
- Proof-of-concept exploits and reproduction labs for CVEs analyzed by the Exploit Intelligence Platform☆26Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- how to strangle threats☆69Updated this week
- AWACS for RBAC. Tool for auditing CRUD permissions in Kubernetes' RBAC.☆46May 21, 2024Updated 2 years ago
- MCP Snitch is a macOS application that intercepts and monitors MCP server communications, providing security analysis, access control, an…☆93Oct 14, 2025Updated last year
- Used to check Github actions logs for secrets - specifically tj-actions and reviewdog☆23Mar 18, 2025Updated last year
- ☆17Sep 14, 2026Updated last month
- Modern Web Application Firewall for Kong Gateway☆29Oct 14, 2026Updated last week
- Local-first AWS forensic engine. Finds waste via dependency graph analysis and enables safe remediation with Terraform state restoration.☆168Sep 11, 2026Updated last month