Skip to content
hackingtools.ai

Cloud Security

Tools and platforms for securing cloud workloads, configurations and control planes: CSPM, CIEM, container and Kubernetes posture, and cloud-native detection. Application code and dependency checks belong in Application Security.

Filters
Pricing
Platform
Open source

25 tools

  • ScubaGear

    ScubaGear

    ScubaGear is a free public-domain assessment tool used to check Microsoft 365 tenants against CISA secure configuration baselines for M365 admins.

    Cloud SecurityFree
    0
  • Docker Bench for Security

    Docker Bench for Security

    Docker Bench for Security is a free script used to check Docker hosts against CIS Docker Benchmark practices for platform and security teams.

    Cloud SecurityFreeOpen source
    0
  • CloudFox

    CloudFox

    CloudFox is a free cloud situational-awareness tool used to map attack paths in AWS, Azure, and GCP for pentesters on authorized cloud assessments.

    Cloud SecurityFreeOpen source
    0
  • Cloud Custodian

    Cloud Custodian

    Cloud Custodian is a free rules engine used to define and enforce cloud resource policies across AWS, Azure, and GCP for cloud security and platform teams.

    Cloud SecurityFreeOpen source
    0
  • Steampipe (Turbot)

    Steampipe (Turbot)

    Steampipe by Turbot is a free query engine used to inspect live cloud and SaaS APIs with SQL for security, compliance, and cloud operations teams.

    Cloud SecurityFreeOpen source
    0
  • kube-bench (Aqua Security)

    kube-bench (Aqua Security)

    kube-bench by Aqua Security is a free tool used to check Kubernetes nodes and control planes against the CIS Kubernetes Benchmark for platform security teams.

    Cloud SecurityFreeOpen source
    0
  • Kubescape

    Kubescape

    Kubescape is a free open-source Kubernetes security platform used to scan clusters, manifests, and Helm charts for risky settings for DevOps and security teams.

    Cloud SecurityFreeOpen source
    0
  • Falco

    Falco

    Falco is a free open-source runtime security tool used to detect suspicious behavior in hosts, containers, and Kubernetes in real time for cloud security teams.

    Cloud SecurityFreeOpen source
    0
  • Pacu

    Pacu

    Pacu is a free open-source AWS exploitation framework used to test Amazon Web Services accounts for cloud penetration testers working with authorization.

    Cloud SecurityFreeOpen source
    0
  • Checkov

    Checkov

    Checkov is a free static analysis tool used to find misconfigurations in infrastructure as code and open source packages for cloud and DevSecOps teams.

    Cloud SecurityFreeOpen source
    0
  • Qualys

    Qualys

    Qualys VMDR is cloud vulnerability management for discovering, prioritising and remediating risks across hybrid IT assets on a per-asset subscription.

    Vulnerability ManagementPaid
    0
  • Prowler

    Prowler

    Open-source cloud security platform for multi-cloud posture, compliance and hardening checks, with optional managed Prowler Cloud plans.

    Cloud SecurityFreemiumOpen source
    0
  • Orca Security

    Orca Security

    Orca Security is a commercial agentless CNAPP that finds vulnerabilities, misconfigurations, identities and data risks across multicloud workloads.

    Cloud SecurityPaid
    0
  • Trivy

    Trivy

    Aqua Security's open-source scanner for vulnerabilities, misconfigurations, secrets and SBOMs across containers, code, Kubernetes and cloud targets.

    Cloud SecurityFreeOpen source
    0
  • Auth0

    Auth0

    Auth0 by Okta is a customer identity platform for authentication, SSO, MFA and authorization, with a Free plan up to 25,000 monthly active users.

    Identity & AccessFreemium
    0
  • Wiz

    Wiz

    Commercial cloud and AI security platform that maps code, cloud and runtime into a security graph to prioritise exploitable risk.

    Cloud SecurityPaid
    0