Cloud Security Tool Directory

Large benchmark coverage with pragmatic cloud misconfiguration checks.

Graph-based cloud attack path visibility across workloads and identities.

Broad CNAPP suite spanning code, runtime, and cloud posture domains.

Policy-as-code scanning for Terraform, Kubernetes, and CloudFormation.

Fast local Terraform static analysis with clear remediation output.

Developer-first IaC checks tightly integrated into pull request flow.

High-signal secret discovery with verified credential checks.

Simple, fast, and CI-friendly scanner for leaked credentials.

Single CLI for image, filesystem, and IaC vulnerability checks.

Runtime threat detection for containers and Kubernetes workloads.

General-purpose policy engine used from CI to admission control.

Policy-driven cloud resource governance and automated remediation.

Developer-friendly SBOM generator with broad package ecosystem support.

Vulnerability scanner designed to pair directly with generated SBOMs.

Identity-centric detection focused on cloud service account abuse.

Privilege escalation path analysis for AWS IAM role relationships.

Multi-cloud security audit with visualized findings and drill-down.

Query cloud APIs with SQL for rapid compliance checks and dashboards.