PrismX is a cloud security dashboard that provides centralized visibility into AWS security issues based on CIS Security Benchmarks. The platform offers a unified view of cloud security posture across multiple AWS accounts, presenting both high-level executive summaries and detailed actionable data for technical teams. Key features include: - Automated daily security scans using ScoutSuite - Executive dashboard with high-level security overview - Detailed security findings for individual contributors - Built-in JIRA integration with pre-filled issue templates - Issue triaging capabilities for security remediation - Multi-account AWS environment support The tool is built on a tech stack consisting of ScoutSuite for security scanning, Django for the web framework, Redis for caching, and Celery for task management. PrismX is designed for organizations managing multiple AWS accounts that need comprehensive visibility into their cloud security compliance and posture management.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Cloudmarker is a configurable cloud monitoring tool and framework that audits Azure and GCP environments by retrieving, analyzing, and alerting on cloud security data.
FestIn discovers open S3 buckets associated with a domain using crawling and DNS reconnaissance techniques.
A tutorial demonstrating how to implement Kubernetes Engine security features to control application privileges through host access controls and network access policies.
LambdaGuard is an AWS Lambda auditing tool that provides security configuration checks, statistical analysis, and service dependency mapping for serverless functions.
A Docker security vulnerability where disabling inter-container communication (ICC) fails to block raw ethernet frames, allowing unexpected data transfer between containers via raw sockets.
A framework for analyzing container images, running scripts inside containers, and gathering information for static analysis and policy enforcement.
CloudSploit by Aqua is an open-source multi-cloud security scanning tool that detects security risks and compliance issues across AWS, Azure, GCP, OCI, and GitHub platforms.
Collection of Kubernetes manifests creating pods with elevated privileges for security testing.
A command-line security auditing tool that performs Lynis-based security assessments across AWS, GCP, Azure, and DigitalOcean cloud platforms.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.