Kubespot (AWS) AWS EKS Setup for PCI-DSS, SOC2, HIPAA
Kubespot is a light wrapper around AWS EKS, providing a customized setup for PCI-DSS, SOC2, and HIPAA compliance. It includes locked down security groups, private subnets, and other compliance-related requirements. It also includes locked down RDS and Elasticache if needed, a single Load Balancer for reduced costs, KEDA for scaling on event metrics, and Karpenter for autoscaling. Instance are lockdown with encryption, and a regular node cycle rate is set. It is distributed as an open source terraform module, allowing you to run it within your own AWS account without lock-in.
FEATURES
ALTERNATIVES
A comprehensive cloud security platform that provides threat prevention, posture management, and risk prioritization across cloud applications, networks, and workloads.
A cloud-native application protection platform that provides comprehensive security monitoring, vulnerability management, and threat detection for cloud environments and container workloads.
LogRhythm SIEM is a comprehensive security information and event management platform that collects, analyzes, and responds to security events across an organization's IT infrastructure.
Conmachi is a Golang tool for scanning container environments for security issues.
A framework to analyze container images and gather useful information.
An AWS Lambda auditing tool that provides asset visibility and actionable results through statistical analysis and security checks.
CLI tool for deleting AWS resources in bulk with inspecting functionality.
Multi-account cloud security tool for AWS with real-time reporting and auto-remediation capabilities.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.