Search Packages

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

policy-sentry

IAM Least Privilege Policy Generator

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

cfripper

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

airiam

Least privilege AWS IAM Terraformer

cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

festin

FestIn - Open S3 Bucket Scanner

kinnaird-utils

IAM Least Privilege Policy Generator

aws-iam-utils

Python library for examining, creating and optimising IAM policies

awsxenos

AWSXenos will list all the trust relationships in all the IAM roles, S3 buckets, and more

cyntrisec

Proof-carrying cost cuts and AWS attack-path analysis (local, read-only CLI).

aws-network-preflight

Declare allowed and denied AWS connectivity in YAML and verify it with AWS Reachability Analyzer.

cloudsecure

CLI for the CloudSecure AWS Security Assessment Platform

bedrock-keys-security

Detect phantom IAM users, decode leaked AWS Bedrock API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

sgcontrol

Foolproof AWS security group management.

guardduty-playbook-commons

Community-maintained GuardDuty finding remediation playbooks with multi-target converter

security-monkey

Security Monkey monitors policy changes and alerts on insecure configurations in an AWS account

psgraph

Infrastructure as code static analysis

cloudgrep

cloudgrep is grep for cloud storage

pacbot

PacBot (Policy as Code Bot)

pingsafecli

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

chekov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.