Dow Jones Hammer
Dow Jones Hammer is a multi-account cloud security tool for AWS that identifies misconfigurations and insecure data exposures within AWS resources, provides near real-time reporting capabilities, and can perform auto-remediation of some misconfigurations to create secure guardrails for products deployed on the cloud. The documentation is available on GitHub Pages at https://dowjones.github.io/hammer/. It covers security features like insecure services, cloud security issues, and technologies used such as Python 3.6, AWS services, Terraform, JIRA, and Slack.
FEATURES
ALTERNATIVES
A tool that discovers all AWS resources created in an account
Cloud Custodian (c7n) is a rules engine for managing public cloud accounts and resources with a focus on security, compliance, and cost optimization.
Kube-bench is a tool for checking Kubernetes security based on CIS Kubernetes Benchmark.
A project exploring minimal set of restrictions for running untrusted code using Linux containers in a concise codebase.
S3Scanner scans for misconfigured S3 buckets across S3-compatible APIs, identifying potential security vulnerabilities and data exposure risks.
Automate actions on Security Command Center findings with automated disk snapshots, IAM grant revocation, and more.
A command-line tool to get valuable information out of AWS CloudTrail and a general purpose toolbox for working with IAM policies
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.