PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by user interfaces.
☆82Dec 14, 2022Updated 3 years ago
Alternatives and similar repositories for peach-framework
Users that are interested in peach-framework are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆115Jan 2, 2025Updated last year
- Harness the security superpowers of your cloud asset inventory☆11Sep 22, 2024Updated last year
- An open project to list all publicly known cloud vulnerabilities and CSP security issues☆395May 10, 2026Updated 3 months ago
- This repository provides a comprehensive collection of Pulumi scenarios utilized by cnappgoat☆22Jan 28, 2025Updated last year
- Firepit - STIX Columnar Storage☆18Jun 5, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Pritunl Access Control System☆11Jul 28, 2026Updated 3 weeks ago
- ☆23Jun 16, 2026Updated 2 months ago
- CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.☆296Sep 4, 2024Updated last year
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated last year
- AI featured threat modeling and security review action☆48Nov 17, 2024Updated last year
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆39Oct 17, 2024Updated last year
- ☆111Aug 6, 2026Updated last week
- Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.☆14Aug 12, 2021Updated 5 years ago
- AI-based implant feature☆25Apr 28, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆12Jul 28, 2026Updated 3 weeks ago
- A Real-time Event Correlation platform☆16Jan 30, 2017Updated 9 years ago
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆345Updated this week
- Security Alert Decoration☆27Jul 28, 2026Updated 3 weeks ago
- An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.☆122Aug 5, 2026Updated last week
- ☆40Aug 2, 2024Updated 2 years ago
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- Public repository to provide guidance and examples for people to start learning IaC. This repository also contains some open-hack style l…☆24Jun 14, 2023Updated 3 years ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆14May 22, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Apfell POC Chrome Extension Payload☆10Jun 24, 2020Updated 6 years ago
- AWS docs, guides, and other tools☆75Feb 4, 2023Updated 3 years ago
- Generates runbooks for GuardDuty findings☆38Jun 24, 2024Updated 2 years ago
- Open Source External Attack Surface Management☆49Apr 6, 2024Updated 2 years ago
- Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.☆25Apr 27, 2026Updated 3 months ago
- ☆58Dec 13, 2025Updated 8 months ago
- ☆30Jul 29, 2021Updated 5 years ago
- IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)☆98Sep 14, 2022Updated 3 years ago
- ☆15Jun 3, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆59Updated this week
- A meta-database collecting resources that compile lists of breaches☆22Oct 30, 2025Updated 9 months ago
- Dont Gamble with Risk☆14Mar 4, 2024Updated 2 years ago
- a tool to audit the istio service mesh☆174Oct 22, 2021Updated 4 years ago
- eBPF-based programmable firewall, intended for use in Go backends☆27Jan 26, 2026Updated 6 months ago
- AWS STS token decoder☆47Mar 18, 2025Updated last year
- Graph-based security analysis for everyone☆362Feb 19, 2026Updated 5 months ago