cloud-security

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

GPU-accelerated secret scanner for code, Git history, containers, cloud, browser assets, and CI. 923 detectors, live verification, CUDA, Metal, WGPU.

Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harvesting

Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance-aware engineering - works with Claude Code, Codex, Cursor, Copilot, and more.

UZYNTRA API Firewall is a high-performance API security engine that inspects, detects, and mitigates threats in real time through a programmable reverse proxy architecture.

Scorton is an open-source behavioral cybersecurity framework that makes human trust measurable and programmable. Built with Rust, Python and NodeJS it helps developers and security teams predict, score, and improve human-driven cyber risk and awareness.

AI-agent posture scanner for developer machines: inventory, sourced threat catalog, live MCP probing, scan diffing, CycloneDX 2.0 Blueprint, compliance evidence. Local only. Not affiliated with StepSecurity.

Map AWS IAM permissions into a Neo4j graph for visual analysis

AWS Lambda runtime application self-protection (RASP). Free and opensource.

Ultra-lightweight native macOS menu bar switcher for AWS IAM Identity Center (AWS SSO). Built with Rust + Svelte 5.

OpenSSL 3.x provider for AWS KMS key operations

Attack-path query language in Rust: how an AWS IAM principal reaches admin, with the escalation chain

TEE Attestation SDK for rust

Detects real change in FedRAMP's machine-readable rules, schemas, and marketplace data, and emits a cryptographically signed .aion chain

CLI for the Scaleway API: audit an account for IAM weaknesses, internet exposure, plaintext credentials and published CVEs. Every request is a GET. Read-only, no telemetry, single Rust binary.

Unofficial CLI for the Wiz API. Not affiliated with or endorsed by Wiz, Inc.

Read-only Rust CLI to detect Azure Policy drift across subscriptions, prioritize non-compliant resources and generate remediation reports