S3Scanner
S3Scanner is an open-source tool that scans for misconfigured S3 buckets across S3-compatible APIs, helping to identify potential security vulnerabilities and data exposure risks. The tool provides a comprehensive scan of S3 buckets, detecting issues such as publicly accessible buckets, unsecured buckets, and buckets with misconfigured permissions. S3Scanner is designed to help security teams and developers identify and remediate S3 bucket misconfigurations, reducing the risk of data breaches and unauthorized access. With its easy-to-use interface and customizable scanning options, S3Scanner is an essential tool for anyone working with S3 buckets and concerned about cloud security.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Krampus is a security solution for managing AWS objects and can be used as a cost-control tool.
Docker's Actuary automates security best-practices checks for Docker containers.
CLI tool for deleting AWS resources in bulk with inspecting functionality.
Automatically compile AWS SCPs for compliant AWS services based on preferred frameworks.
A tool for building Open Container Initiative (OCI) container images with various functionalities.
A tool that discovers all AWS resources created in an account
A Lambda Function that disables AWS IAM User Access Keys after a set amount of time to reduce the risk associated with old access keys.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.