KICS (Keeping Infrastructure as Code Secure) is an open-source security scanning tool designed to analyze Infrastructure as Code (IaC) configurations for security vulnerabilities and misconfigurations. The tool operates through customizable heuristic rules called queries that can be edited, extended, and added to meet specific security requirements. KICS features a modular architecture that enables support for multiple Infrastructure as Code solutions. Key capabilities include: - Static analysis of IaC templates and configurations - Detection of security issues and compliance violations - Integration with CI/CD pipelines for automated security scanning - Extensible query system for custom security rules - Support for various cloud-native and infrastructure technologies The tool provides structured output results that help identify and remediate detected security issues. KICS is designed for cloud-native projects and can be integrated into development workflows to ensure infrastructure security from the early stages of deployment.