Leash by StrongDM - take your AI agents for a walk

Helm Charts for running CrowdStrike Falcon with Kubernetes

Simple and flexible tool for managing secrets

All the deals for InfoSec related software/tools this Black Friday

Connect Falco to your ecosystem

Cloud Native Runtime Security

Linux Runtime Security and Forensics using eBPF

Main Sigma Rule Repository

Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques

Azure and AWS Attacks

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

AWS Control Tower Account Factory

AWSGoat : A Damn Vulnerable AWS Infrastructure

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

Runs IAM policy linting and security checks against either a single AWS account or multiple member accounts of an AWS Organization.

Uses the AWS Cloud Control API to list resources that are present in a given AWS account and region(s). Discovered resources are written to a JSON result file.

Analyzes CloudTrail data of a given AWS account and generates a summary of recently active IAM principals, API calls they made, as well as regions, IP addresses and user agents they used.

Pod Security Admission (PSA) Testing for Kubernetes 1.23+

AWS SSM made easy

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

Automating situational awareness for cloud penetration tests.

🛡️ Awesome Cloud Security Resources ⚔️

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

What the f*ck Python? 😱

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

SCP management tool

Automated Penetration Testing Agentic Framework Powered by Large Language Models