# auspex

auspex is a CIEM product. It runs on-premises. Pricing is free.

A graph-based tool for visualizing AWS access permissions and resource relationships to identify potential attack paths and privilege escalation opportunities.

## What is auspex?

auspex is a graph-based visualization tool designed for analyzing AWS environments to understand effective access permissions and resource relationships.

The tool resolves AWS policy information to determine which actions can affect specific resources within an AWS account. It takes into account how different actions may be combined to create potential attack paths, providing security teams with visibility into privilege escalation opportunities and lateral movement possibilities.

auspex consists of two main components: an ingestor that collects AWS account data, and a web interface that enables interactive exploration of the collected information. The tool presents this data in a graph format, making it easier to visualize complex relationships between AWS resources, permissions, and potential security risks.

The tool requires Docker for installation and can be deployed on Linux or macOS systems. It helps security professionals understand the effective permissions landscape within their AWS infrastructure by mapping out how IAM policies, resource-based policies, and service configurations interact to create access patterns.

Tags: Visualization, Attack Paths, Lateral Movement, Policy, AWS, Graph, Privilege Escalation

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [IAM](https://cybersectools.com/categories/iam) · [CIEM](https://cybersectools.com/categories/ciem)
- Deployment: On-Premises
- Company size fit: Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 973
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best IAM Solutions for Business](https://cybersectools.com/shortlists/best-iam-solutions).

## auspex FAQ

### What is auspex?

auspex is a product in the CIEM category. It covers Visualization, Attack Paths and Lateral Movement.

### What is the pricing for auspex?

auspex is free. Download and setup instructions are at https://github.com/fsecurelabs/awspx/.

### What are alternatives to auspex?

Alternatives to auspex listed on CybersecTools:

1. [Sysdig Cloud Infrastructure Entitlement Management (CIEM)](https://cybersectools.com/tools/sysdig-cloud-infrastructure-entitlement-management-ciem) - Cloud identity entitlement mgmt. for right-sizing perms & detecting compromise (Commercial)
2. [SecLogic CyberQ Shield - CIEM](https://cybersectools.com/tools/seclogic-cyberq-shield-ciem) - Agentless CIEM tool for managing cloud entitlements & enforcing least privilege. (Commercial)
3. [AWS IAM Access Analyzer](https://cybersectools.com/tools/aws-iam-access-analyzer) - AWS IAM Access Analyzer is a tool for implementing and maintaining least privilege access in AWS environments through automated analysis and validation of IAM policies and permissions. (Commercial)
4. [Teriam Cloud Identity and Access Management](https://cybersectools.com/tools/teriam-cloud-identity-and-access-management) - Consolidates and remediates multi-cloud identity and access risk across AWS, Azure (Commercial)
5. [Sonrai Cloud Permissions Firewall](https://cybersectools.com/tools/sonrai-cloud-permissions-firewall) - Automates least privilege enforcement in cloud via centralized policies & ChatOps (Commercial)

Compare all auspex alternatives at [https://cybersectools.com/alternatives/auspex](https://cybersectools.com/alternatives/auspex)

### What deployment and organization size does auspex fit?

auspex is available as on-premises. It is listed for mid-market and enterprise organizations. It is free.

## Compare auspex with similar solutions

- [auspex vs Sysdig Cloud Infrastructure Entitlement Management (CIEM)](https://cybersectools.com/compare/auspex-vs-sysdig-cloud-infrastructure-entitlement-management-ciem)
- [auspex vs SecLogic CyberQ Shield - CIEM](https://cybersectools.com/compare/auspex-vs-seclogic-cyberq-shield-ciem)
- [auspex vs AWS IAM Access Analyzer](https://cybersectools.com/compare/auspex-vs-aws-iam-access-analyzer)

All alternatives to auspex: [/alternatives/auspex](https://cybersectools.com/alternatives/auspex)

---

Source: https://cybersectools.com/tools/auspex

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on auspex: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md