IAM Zero detects identity and access management issues and automatically suggests least-privilege policies by capturing errors in applications or commands, matching them against Access Advisory lists, and providing customized recommendations for your cloud environment. Currently works for AWS with plans to expand to other platforms like GCP, Azure, and Kubernetes.
FEATURES
ALTERNATIVES
Zoho Vault is a secure password management tool that allows you to store and automatically fill in passwords on websites and apps.
An attacker can create a new IAM policy version and set it as the default version without requiring the iam:SetDefaultPolicyVersion permission.
Encrypt Kubernetes Secrets into SealedSecrets for safe storage and controlled decryption within the cluster.
BeyondTrust Privileged Access Management (PAM) provides comprehensive security controls for privileged accounts and users.
Abusing DNSAdmins privilege for escalation in Active Directory
A tool for privilege escalation within Linux environments by targeting vulnerabilities in SUDO usage.
PINNED

InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.

System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.

Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.

Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.

Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.

Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.