Cloud Security Posture Management Tools
Cloud Security Posture Management (CSPM) platforms for continuous cloud security monitoring, compliance checking, and misconfiguration detection across AWS, Azure, and GCP.
Browse 152 cloud security posture management tools
FEATURED
USE CASES
An archived community-driven collection of open source cloud security tools that provided monitoring and compliance capabilities for cloud infrastructure.
CloudMapper is an AWS security analysis tool that audits configurations, identifies misconfigurations, analyzes IAM policies, finds unused resources, and provides network visualization capabilities.
A multi-account AWS security tool that identifies misconfigurations, provides real-time reporting, and performs automated remediation to establish secure cloud guardrails.
SkyWrapper analyzes temporary token behaviors in AWS accounts to detect suspicious activities and generates Excel reports with findings summaries.
Cloudmarker is a configurable cloud monitoring tool and framework that audits Azure and GCP environments by retrieving, analyzing, and alerting on cloud security data.
TerraGoat is a deliberately vulnerable Terraform repository that demonstrates common cloud infrastructure misconfigurations for training and testing security tools.
CloudSploit by Aqua is an open-source multi-cloud security scanning tool that detects security risks and compliance issues across AWS, Azure, GCP, OCI, and GitHub platforms.
A command-line security auditing tool that performs Lynis-based security assessments across AWS, GCP, Azure, and DigitalOcean cloud platforms.
Cloud Security Posture Management Tools FAQ
Common questions about Cloud Security Posture Management tools, selection guides, pricing, and comparisons.
CSPM tools continuously monitor cloud configurations across AWS, Azure, and GCP for: storage buckets with public access, overly permissive IAM policies, unencrypted databases and volumes, network security groups allowing unrestricted access, missing logging and monitoring, non-compliant resources against frameworks like CIS Benchmarks, SOC 2, and HIPAA. They detect configuration drift and alert on new misconfigurations.
