aquasecurity/cloudsploit

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Multi-Cloud Security Auditing Tool

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Open Source Cloud Native Application Protection Platform (CNAPP)

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Tfsec is now part of Trivy