CIEM Tools

Trustle

JIT access mgmt platform enforcing least privilege across cloud & SaaS.

Solvo CIEM

Cloud entitlements mgmt with least-privilege policy automation & risk remediation.

Skyhawk Synthesis - CIEM

Cloud entitlement mgmt platform for managing & right-sizing cloud permissions.

SecLogic CyberQ Shield - CIEM

Agentless CIEM tool for managing cloud entitlements & enforcing least privilege.

ObserveID CIEM

CIEM platform for multicloud identity visibility, monitoring, and remediation.

Entitle Cloud Permissions Management

JIT cloud permissions mgmt platform enforcing least privilege access.

C3M Cloud Control CIEM

Agentless CIEM for IAM governance and least privilege across multi-cloud.

Andromeda Security Rightsize Your Permissions for Human Users + NHI

Cloud IAM permission rightsizing tool for human and non-human identities

Andromeda Continuous Least Privilege

Automates least privilege enforcement across cloud, SaaS, and on-prem identities.

Simeio Cloud Infrastructure Entitlement Management (CIEM)

Managed CIEM service for multi-cloud permission & entitlement management

Saporo Cloud Hardening

Cloud security platform for identity & access risk analysis across Azure/M365

Mesh Platform

Unified Zero Trust platform for enterprise security visibility and control

Apono Zero Standing Privileges

JIT/JEP access mgmt platform replacing standing privileges w/ time-bound access

Sonrai Cloud Permissions Firewall

Automates least privilege enforcement in cloud via centralized policies & ChatOps

Sysdig Cloud Infrastructure Entitlement Management (CIEM)

Cloud identity entitlement mgmt. for right-sizing perms & detecting compromise

AWS IAM Access Analyzer

AWS IAM Access Analyzer is a tool for implementing and maintaining least privilege access in AWS environments through automated analysis and validation of IAM policies and permissions.

Access Undenied on AWS

Access Undenied on AWS analyzes CloudTrail AccessDenied events to explain access denial reasons and provide least-privilege remediation suggestions.

auspex

A graph-based tool for visualizing AWS access permissions and resource relationships to identify potential attack paths and privilege escalation opportunities.

SkyArk

SkyArk is a cloud security scanning tool that identifies privileged entities in AWS and Azure environments to help mitigate Cloud Shadow Admin threats.

IAMSpy

IAMSpy is a library that uses the Z3 prover to analyze AWS IAM policies and query whether specific actions are allowed or denied.

CloudTracker

CloudTracker analyzes CloudTrail logs against IAM policies to identify over-privileged AWS users and roles by comparing actual permission usage with granted permissions.

Policy Sentry IAM Least Privilege Policy Generator

Policy Sentry is an automated IAM policy generator that helps developers create least privilege AWS IAM policies through a template-based workflow.

AirIAM

AirIAM analyzes AWS IAM usage patterns and generates least-privilege Terraform configurations to optimize cloud access management.

TrailScraper

TrailScraper is a command-line tool for extracting information from AWS CloudTrail logs and generating IAM policies based on actual API usage patterns.