nccgroup/ScoutSuite

Cloud Security Posture Management (CSPM)

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources will have nowhere to hide!

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Open Source Cloud Native Application Protection Platform (CNAPP)