aws-security-viz
aws-security-viz is a visualization tool that generates graphical representations of AWS EC2 security group configurations. The tool analyzes security group ingress rules and creates visual diagrams to help understand network access patterns and security configurations. The tool supports both EC2 Classic and VPC security groups, allowing users to visualize their current AWS security posture. It can output diagrams in multiple formats supported by Graphviz, including SVG and other standard image formats. Users can generate visualizations directly by providing AWS credentials, or by using existing security group data exported from AWS CLI in JSON format. The tool includes a web-based navigator feature that creates interactive HTML visualizations for viewing security group relationships in a browser. Installation requires Ruby gems and Graphviz as dependencies. The tool can be run locally or through Docker containers for users who prefer not to install dependencies directly on their systems.
FEATURES
SIMILAR TOOLS
CloudSploit by Aqua is an open-source multi-cloud security scanning tool that detects security risks and compliance issues across AWS, Azure, GCP, OCI, and GitHub platforms.
S3Scanner is an open-source tool that scans S3 buckets across S3-compatible APIs to identify misconfigurations and security vulnerabilities.
A setuid implementation of user namespaces that enables running unprivileged containers without root privileges as a secure alternative to traditional container runtimes.
AWS Vault securely stores AWS IAM credentials in the operating system's keystore and generates temporary credentials for development environments.
A tutorial demonstrating how to implement Kubernetes Engine security features to control application privileges through host access controls and network access policies.
FestIn discovers open S3 buckets associated with a domain using crawling and DNS reconnaissance techniques.
Cloudmarker is a configurable cloud monitoring tool and framework that audits Azure and GCP environments by retrieving, analyzing, and alerting on cloud security data.
A search engine for open Amazon S3 buckets and their contents, allowing users to search for files using keywords, filename extensions, and full path.
TerraGoat is a deliberately vulnerable Terraform repository that demonstrates common cloud infrastructure misconfigurations for training and testing security tools.
PINNED
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.