cspm

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. Connect your agents now and build on the Agentic Cloud Defender.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

Open Source Cloud Native Application Protection Platform (CNAPP)

Cloud Security Posture Management (CSPM)

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

Query, provision and operate Cloud, SaaS, API and Model Context Protocol (MCP) resources through a unified SQL-based framework for humans and AI agents.

Open Source Cloud Security

opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.

The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Open Cloud Security Posture Management Engine

A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.

A list of cloud security tools and vendors.

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.

Transilience — Shasta is the open-source pre-GA AI and Cloud Security platform. Supports GCP, AWS, and Azure and 14 security & compliance frameworks

An open-source security platform for the community. Unified SIEM, SOAR, WAF, and more in a single, self-hosted solution.