security-as-code

An open source, cloud-native security to protect everything from build to runtime

open source, cloud-native, graph-based query language

A modern, extensible framework for defining and enforcing security policies across your digital infrastructure.

OSCAL tools for AI agents

Deepfence Runtime API & code samples

Hardened Windows Server image

Security Scanning Samples with cnspec, cnquery, and Mondoo Platform

A security-as-code tool for making a difference in cybersecurity

DeepLint is a Security-as-Code framework for securing and optimizing cloud environments.

Ansible Role for Mondoo cnquery and cnspec

Security skill collection for Claude Code and Codex — SAST, DAST, binary analysis, architecture review, code clustering, and assessment-as-code workflows

Production-grade Terraform module that provisions a Docker Swarm cluster on AWS — secure bootstrap via SSM (no SSH provisioners), remote state with S3/DynamoDB, dev/staging/prod environments, and a full CI pipeline (checkov, tflint, gitleaks).

Security policy as code for any API gateway. One policy per route (an OpenAPI extension), compiled by a deterministic CLI to Kong, Coraza, BunkerWeb, Cloudflare & more. Versions in git, drift fails CI. Apache-2.0.

Ansible collection to audit and remediate systems against the CIS Benchmarks

Cloud - K8s Security & Compliance Automation Jobs

Operate Elastic Security as code with a safety-first CLI for security engineers.

Scan codebases for security flaws with LLM agent skills that turn Claude Code, Cursor, and other assistants into SAST scanners

A comprehensive DevSecOps platform demonstrating Security-as-Code with a hardened CI/CD pipeline, automated security gates (SAST, SCA, Secrets), and blue-green deployments.

Version threat models, hardening baselines, detection rules, secure defaults, and security-review checks as testable artifacts.

An AI powered IAM agent that uses GitHub Copilot CLI to generate, validate (via Boto3), and report on least privilege AWS policies.