Set up a personal VPN in the cloud
Repository Index
47,133 repositories indexed
1–23 of 23 · Most stars
The authentication glue you need.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Multi-Cloud Security Auditing Tool
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Automated Security Testing For REST API's
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
IAM Least Privilege Policy Generator
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
NGINX configuration static analyzer
Run programs on linux with selectively restricted permissions.
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
AWS Identity and Access Management Visualizer and Anomaly Finder
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Distributed Honeypot
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.