Tools
content
ComplianceAsCode/content
ComplianceAsCode produces security compliance content for many operating systems, generating SCAP, Ansible and Bash checks from YAML rules. Administrators use it with OpenSCAP to scan and remediate machines against profiles such as STIG and PCI-DSS.
Topics
Related projects
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
kyverno8.3kA Kubernetes-native policy engine that uses policy-as-code to validate, mutate, generate, and clean up resources, and to verify container image signatures.
ossec-hids5.1kOSSEC is an open-source host-based intrusion detection system. It combines log analysis, file integrity monitoring, policy checking, rootkit detection, real-time alerting and active response across a self-hosted server and agents.
bearer2.8kBearer is a static application security testing (SAST) CLI that scans source code and data flows to find and prioritize security and privacy risks. Developers run it locally or in CI pipelines.
copacetic1.7kA CLI tool that directly patches vulnerabilities in existing container images with buildkit, driven by reports from scanners such as Trivy, without full rebuilds.