Tools
steampipe
turbot/steampipe
Steampipe lets you query cloud APIs, code, and logs with SQL in real time, using plugins that map external services to Postgres tables without any ETL.
Topics
Related projects
powerpipe526Code-based dashboards for DevOps teams to visualize cloud infrastructure and run compliance benchmarks.
cloudsploit3.8kCloudSploit is an open-source cloud security posture management scanner that audits AWS, Azure, GCP and other accounts for misconfigurations and compliance issues.
ScoutSuite7.9kMulti-Cloud Security Auditing Tool
sops23.7kAn editor of encrypted files that supports YAML, JSON, ENV, and binary formats, using cloud KMS, age, or PGP keys to manage secrets safely.- tfsec7.1ktfsec is a static analysis scanner that detects misconfigurations in Terraform code across major cloud providers, with hundreds of built-in rules and easy CI integration.
cloudfox2.6kA command-line tool for cloud penetration testing that enumerates AWS, Azure and GCP resources, permissions and trust relationships to uncover exploitable attack paths.