Open source alternative cloud security tool that works like Wiz/Lacework/Aqua

• prowler

  25 9,720 9.8 Python

  Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

  

Im using prowler for aws and recently they added support for Azure, which ia great. Prowler Its not exactly a 100% cspm, but with some tweaking and integrations, it might be. Im usually running this is a 1 time assessment to see the current status of the environment.

• opencspm

  2 287 3.7 Ruby

  Discontinued Open Cloud Security Posture Management Engine

  

There was a project called open cspm(OpenCSPM), but im afraid its not being maintained anymore.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• ScoutSuite

  24 6,244 4.9 Python

  Multi-Cloud Security Auditing Tool

  

Another solution might be ScoutSuite, they have support for all major clouds - aws,gcp and azure. But its probably not maintained as well. ScoutSuite

• cloudsploit

  6 3,221 9.9 JavaScript

  Cloud Security Posture Management (CSPM)

  

I also heard about CloudSploit by Aqua, but never actually used it yet. You might want to take a look. CloudSploit

• steampipe

  147 6,500 9.7 Go

  Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

  

Yes! There are open source cloud security tools! Here are some open source tools out there: steampipe, prowler, cloudquery, and ZeusCloud.

• ZeusCloud

  24 672 7.7 TypeScript

  Open Source Cloud Security

  

Yes! There are open source cloud security tools! Here are some open source tools out there: steampipe, prowler, cloudquery, and ZeusCloud.

• my-arsenal-of-aws-security-tools

  6 8,757 5.1 Shell

  List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

I'm a biased vendor, but for OSS I prefer Prowler... (has a commercial tier we technically compete with but the OSS is strong and I really like the people there). Tony, who runs Prowler, also maintains an amazing list of OSS tools in multiple categories. https://github.com/toniblyx/my-arsenal-of-aws-security-tools It's hard to keep up to date but I don't know of any other list that comes close.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project