Kubespot (AWS) AWS EKS Setup for PCI-DSS, SOC2, HIPAA
Kubespot is a light wrapper around AWS EKS, providing a customized setup for PCI-DSS, SOC2, and HIPAA compliance. It includes locked down security groups, private subnets, and other compliance-related requirements. It also includes locked down RDS and Elasticache if needed, a single Load Balancer for reduced costs, KEDA for scaling on event metrics, and Karpenter for autoscaling. Instance are lockdown with encryption, and a regular node cycle rate is set. It is distributed as an open source terraform module, allowing you to run it within your own AWS account without lock-in.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A framework for executing attacker actions in the cloud with YAML-based format for defining TTPs and detection properties, deployable via AWS-native CI/CD pipeline.
A collection of tools for forensics teams to collect evidence from cloud platforms
Burp extension for identifying cloud buckets and testing for vulnerabilities
A cloud and database asset intelligence platform that provides continuous monitoring, compliance management, and security posture assessment across hybrid cloud environments.
CLI tool for deleting AWS resources in bulk with inspecting functionality.
Implements a cloud version of the Shadow Copy attack against domain controllers in AWS, allowing theft of domain user hashes.
AWS Scout2 is a security tool for AWS administrators to assess their environment's security posture.
A free training course and lab environment for learning to test and attack cloud infrastructure, including AWS and Azure.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.