Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

Open Source Cloud Native Application Protection Platform (CNAPP)

Cloud Security Posture Management (CSPM)

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework

Open Source Cloud Security

opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.

The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Open Cloud Security Posture Management Engine

A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.

A list of cloud security tools and vendors.

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.

Curating Falco rules with MITRE ATT&CK Matrix

A collection of technical and sales resources related to Prisma Cloud Compute and Prisma Cloud Enterprise created for the PANW Channel Partner Ecosystem and other engineers working with the solution

A schema and set of tools for using SQL to query cloud infrastructure.

Analyzing Cloud Security Posture

GCP CSPM using Google Sheets

Query and Provision Cloud Infrastructure using an extensible SQL based grammar

RISKEN is a monitoring tool for visualizing security risks.

Cloud deployment size calculation utilities

The following is a simple example of how LLMs and langchain agents can simplify asking questions to understand the security posture of a cloud environment.

CloudCustodian Rules engine for cloud security and governance, DSL in yaml for policies to query, filter, and take actions on resources

OpenCSPM Community Controls

A set of tutorials to learn how to automate various Prisma Cloud tasks.