Tools
cloudformation-guard
aws-cloudformation/cloudformation-guard
AWS CloudFormation Guard is a policy-as-code CLI and DSL for validating CloudFormation templates, Terraform plans and Kubernetes configurations against custom rules.
Topics
Related projects
kyverno8.3kA Kubernetes-native policy engine that uses policy-as-code to validate, mutate, generate, and clean up resources, and to verify container image signatures.
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
tfsec7.1ktfsec is a static analysis scanner that detects misconfigurations in Terraform code across major cloud providers, with hundreds of built-in rules and easy CI integration.
ossec-hids5.1kOSSEC is an open-source host-based intrusion detection system. It combines log analysis, file integrity monitoring, policy checking, rootkit detection, real-time alerting and active response across a self-hosted server and agents.
content2.8kComplianceAsCode produces security compliance content for many operating systems, generating SCAP, Ansible and Bash checks from YAML rules. Administrators use it with OpenSCAP to scan and remediate machines against profiles such as STIG and PCI-DSS.