Libraries & frameworks
inspec
inspec/inspec
Chef InSpec is an infrastructure auditing and testing framework with a human-readable Ruby DSL for expressing compliance, security and policy requirements, runnable against local, remote, container and cloud targets.
Topics
Related projects
sops23.7kAn editor of encrypted files that supports YAML, JSON, ENV, and binary formats, using cloud KMS, age, or PGP keys to manage secrets safely.
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
kyverno8.3kA Kubernetes-native policy engine that uses policy-as-code to validate, mutate, generate, and clean up resources, and to verify container image signatures.
aircrack-ng7.9kAircrack-ng is a complete suite of command-line tools for auditing WiFi security, covering packet capture, injection attacks, adapter testing, and WEP/WPA cracking.
DevSecOps6.9kThe Ultimate DevSecOps library is a curated awesome-list that organizes open-source security tools and methodologies by topic such as SAST, DAST, supply chain, and Kubernetes.