The cfn-nag tool scans CloudFormation templates to identify insecure infrastructure patterns such as overly permissive IAM rules, security group rules, lack of access logs, encryption, and password literals. It can be installed via gem or brew, and can be integrated into CodePipeline for automated scanning.
Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices with a focus on Identity and Access Management.
A tool to fetch all public IP addresses associated with an AWS account
A setuid implementation of a subset of user namespaces, providing a way to run unprivileged containers without requiring root privileges.
Automate actions on Security Command Center findings with automated disk snapshots, IAM grant revocation, and more.
gVisor is an application kernel that provides isolation for running sandboxed containers.
Multi-cloud OSINT tool for enumerating public resources in AWS, Azure, and Google Cloud.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.