This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

Open-source temporary elevated access solution for AWS IAM Identity Center.

Cloud Native Policy Management

Example Sentinel Policies for use with Terraform Cloud and Terraform Enterprise

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

eBPF-based Security Observability and Runtime Enforcement

All algorithms implemented in Ruby

Terraform provider for Elastic Stack

eBPF-based Networking, Security, and Observability

Code signing and transparency for containers and binaries

Ruby integrations for Elasticsearch

Redshift JDBC Driver. It supports JDBC 4.2 specification.

A React component for building Web forms from JSON Schema.

A Central Control Plane for AWS Permissions and Access

This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kube…

CLI for AssumeRole is a tool for running programs with temporary credentials from AWS's AssumeRole API.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Reverse-engineer a Dockerfile from a Docker image.

Pure Ruby implementation of an SSH (protocol 2) client

Go server for two-man rule style file encryption and decryption.

A lightweight, portable, and modular tool for Linux enumeration and privilege escalation.

Integrate external secret management systems with Kubernetes

Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function

IAM Least Privilege Policy Generator

Show the history and changes between configuration versions of AWS resources

Principles to help you design and deploy a zero trust architecture

A tool for exploring each layer in a docker image

KubeCon-CloudNativeCon-Europe-2019's slides. / 2019欧洲CNCF大会PPT。