Open Source Cloud Security
An enterprise-grade, agentless, and open-source cloud security platform for AWS, GCP, and Azure that combines CSPM, DSPM, CIEM, ASM, and vulnerability management with deterministic YAML policies and natural language querying.
A set of tutorials to learn how to automate various Prisma Cloud tasks.
Multi-cloud xSPM platform to scan, visualize, and remediate security risks across cloud, containers, and Kubernetes environments.
An MCP server to enumerate AWS IAM data, analyze effective permissions, and visualize access relationships across users, roles, and resources. Built for cloud security engineers who want fast, easy and effective insights into AWS identity risk
Air-gapped, deterministic AWS/Azure/GCP IAM privilege-escalation scanner — Terraform PR-gate, MCP for Cursor/Claude Code, offline licensing. Runs on your own metal.
Overwatch is an open source CNAPP solution for AWS workloads and AI Security Posture Management (SPM)
🔍 Enhance cloud security visibility across AWS, GCP, and Azure with open-source tools for misconfiguration, data discovery, and vulnerability management.
Agentless GCP drift-detection canary — projects, VMs, firewall rules, buckets, service accounts, SA keys, IAM bindings, and AI-workload signals; every delta to Slack. Identity is the attack surface. Detection half of paved-org.
Cloud entitlement right-sizing (CIEM) on Azure RBAC: seeds four over-provisioning findings, detects them from Activity logs with KQL, remediates to least privilege via PIM JIT, access reviews, and a custom role
Predictive Multi-Cloud Identity Security & CI/CD Guard. Detect escalation paths, analyze dynamic privilege usage, and block risky IAM changes in the pipeline
Security engineering platform focused on identity, configuration, and workload security, built on a staged on-prem foundation with Elastic telemetry and controlled Kubernetes and cloud integrations.
Sonrai Security — independent third-party profile of a public API surface, by API Evangelist. Sonrai Security is a cloud identity and access security company whose Cloud Permissions Firewall (CPF) enforces least-privilege access across AWS, Azure, and Google Cloud by quarantining unused IAM identities, protecting sensitive permissions, and disablin
Ermetic — independent third-party profile of a public API surface, by API Evangelist. Ermetic is a cloud security company founded in 2019 that pioneered cloud infrastructure entitlement management (CIEM) as part of a unified, identity-first cloud-native application protection platform (CNAPP) spanning AWS, Azure, and GCP.
Orca Security — independent third-party profile of a public API surface, by API Evangelist. Orca Security is an agentless cloud security platform that uses its patented SideScanning technology to provide visibility into risks across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, and serverless environments, covering CSPM, CWPP, CIEM, DSPM, vul
Safe, reproducible misconfigured resource creator using terraform scenarios for testing cloud-security detections in disposable cloud environments.
Cyscale — independent third-party profile of a public API surface, by API Evangelist. Cyscale is an agentless, cloud-native application protection platform (CNAPP) that continuously monitors multi-cloud environments to surface, contextualize, and prioritize security risk.
To associate your repository with the ciem topic, visit your repo's landing page and select "manage topics."