KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
☆107Dec 18, 2023Updated 2 years ago
Alternatives and similar repositories for KaiMonkey
Users that are interested in KaiMonkey are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerable Terraform Projects - Fork of https://github.com/bridgecrewio/terragoat☆17Apr 23, 2024Updated 2 years ago
- Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.☆5,213Nov 20, 2025Updated 8 months ago
- ☆41Nov 29, 2024Updated last year
- TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how…☆1,305Jul 13, 2025Updated last year
- Salesforce Policy Deviation Checker☆30Sep 30, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform☆11Dec 20, 2021Updated 4 years ago
- A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat …☆204Aug 29, 2024Updated last year
- The SOCless automation framework☆141Apr 15, 2026Updated 4 months ago
- Offensive Terraform module which creates Kali Linux from the AWS marketplace and installs cloud security tools (Pacu, Cloudsplaining, Sco…☆19Sep 27, 2020Updated 5 years ago
- Terraform to run Scoutsuite security scan of projects within a Google Cloud Org. Report will be published to a GCS bucket.☆17Jan 5, 2026Updated 7 months ago
- A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure☆786Oct 14, 2023Updated 2 years ago
- CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how commo…☆47May 9, 2023Updated 3 years ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- CloudSplaining on AWS Managed Policies☆44Sep 8, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆14Jan 8, 2026Updated 7 months ago
- ☆11Jul 28, 2020Updated 6 years ago
- Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized repo…☆2,243Updated this week
- ☆13May 16, 2019Updated 7 years ago
- Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.☆276Updated this week
- Vulnerable Kustomize Kubernetes templates for training and education☆48Jun 21, 2022Updated 4 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- A comprehensive scanner for Google Cloud☆366Dec 5, 2025Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.☆36May 18, 2022Updated 4 years ago
- Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates ho…☆100Aug 5, 2024Updated 2 years ago
- Cloud Commotion intends to cause chaos to simulate security incidents☆148Jun 18, 2024Updated 2 years ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principals☆292Jun 10, 2026Updated 2 months ago
- ☆18Jul 30, 2024Updated 2 years ago
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆775Dec 11, 2024Updated last year
- This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.☆669Updated this week
- Terraform module for Policy Sentry.☆26Nov 10, 2020Updated 5 years ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆100Jan 12, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Unlocking Serverless Computing to Assess Security Controls☆265Mar 15, 2024Updated 2 years ago
- Automated Attack Simulation in the Cloud, complete with detection use cases.☆617Nov 28, 2024Updated last year
- A cloud security tool to search and clean up unused AWS access keys, written in Go.☆52Sep 2, 2022Updated 3 years ago
- Python library to carry out DFIR analysis on the Cloud☆507Updated this week
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆39Oct 17, 2024Updated last year
- An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.☆122Aug 5, 2026Updated last week
- Security Remediation Guides☆746Nov 24, 2025Updated 8 months ago