selefra
Cloud auditor
An open-source tool for analyzing cloud resources and providing insights on security, cost, and architecture
The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).
526 stars
7 watching
39 forks
Language: Go
last commit: over 2 years ago
Linked from 3 awesome lists
awsazurechatgptcloudcspmdevopsfinopsgcpgolanggoogleinfrastructure-as-codekubernetesopenaipolicy-as-codeterraform
runacapital/awesome-oss-alternatives
sbilly/awesome-security
jakobthedev/awesome-devsecopsRelated projects:
| Repository | Description | Stars |
|---|---|---|
 aquasecurity/cloudsploit | A tool designed to detect security risks in cloud infrastructure accounts | 3,372 |
 cloudfoundry/gosigar | An open-source Golang implementation of the Sigar API | 482 |
 salesforce/cloudsplaining | A tool that scans AWS IAM policies to identify security vulnerabilities and generates a report with recommendations for remediation | 2,009 |
 dragondrop-cloud/cloud-concierge | Automates cloud infrastructure monitoring and optimization by analyzing Terraform state files and detecting drifts, security risks, and cost estimation. | 224 |
 bishopfox/smogcloud | Automatically identifies and monitors cloud assets exposed to the internet without authorization | 332 |
 nccgroup/scoutsuite | Automates security assessment of cloud environments to identify potential vulnerabilities and risks | 6,794 |
 azure/counterfit | An automation tool that assesses the security of machine learning systems by bringing together various adversarial frameworks under one platform. | 818 |
 googlecloudplatform/security-analytics | Provides a set of community-driven security analytics queries and rules for Google Cloud log analysis | 327 |
 gosecure/csp-auditor | Analyzes and configures website security policies to prevent malicious scripts from running on user devices. | 138 |
 denizparlak/hayat | An auditing and hardening script for Google Cloud Platform resources. | 79 |
 wso2/reference-architecture | A collection of reference architectures and guides for designing cloud-native software systems | 1,778 |
 jusafing/pnaf | Analyzes network traffic to provide security assessments and recommendations for network platforms | 32 |
 sekoialab/fastir_collector_linux | A tool for gathering and recording information from live Linux systems for forensic analysis | 173 |
 opencorech/smart-contract-auditing-heuristics | A collection of general guidelines and pitfalls to consider when auditing smart contracts | 578 |
 jonrau1/electriceye | A Python CLI tool for managing security and compliance in cloud and SaaS environments | 966 |