This repository includes cloud security policies for IaC and live resources.

Cloud (IaC) Security plugin for JetBrains IDEs (e.g., IntelliJ IDEA, PyCharm)

Detect drift. Defend cloud.

An enterprise-grade, agentless, and open-source cloud security platform for AWS, GCP, and Azure that combines CSPM, DSPM, CIEM, ASM, and vulnerability management with deterministic YAML policies and natural language querying.

Jenkins plugin for Xygeni - End to end software development and delivery security

One-command Ubuntu Server hardening to achieve cutting-edge security, with ZERO ongoing maintenance required.

Free Browser Based Infrastructure as Code security scanner - Scan Terraform, Kubernetes, Docker, CloudFormation files for vulnerabilities in your browser. 200+ security rules, GitHub repo scanning, PDF reports. Privacy-first, no uploads.

DevSecOps CI/CD pipeline scanner — Jenkins, GitHub Actions, GitLab, Azure Pipelines

Defense-in-depth security scanner for Java projects integrating 6 industry-standard tools (Trivy, Gitleaks, Semgrep, SpotBugs, Checkov, Hadolint) into a unified Dockerized pipeline. Also comes with a standalone installer.

Free security scanner for vector databases and RAG systems. Checks access exposure, drift, misconfigurations, and data leakage risks.

🔍 Enhance cloud security visibility across AWS, GCP, and Azure with open-source tools for misconfiguration, data discovery, and vulnerability management.