Checkov

Infrastructure as Code security scanner supporting Kubernetes, Helm, Terraform, CloudFormation, ARM templates and more.

     

linux windows osx open-source security

Fog

The Ruby Cloud API library. Provides a Ruby API for interacting and managing many cloud providers, such as spinning up new instances, terminating old ones, attaching storage, etc. Currently supports more than 20 providers, including EC2, Rackspace, Brightbox, etc.

     

linux windows osx open-source cloud-paas ruby

jclouds

A Java Library for controlling cloud resources, with various plugins for many popular cloud providers.

     

linux windows osx open-source cloud-paas java

Apache Libcloud

Python library for interacting with many of the popular cloud service providers using a unified API.

     

linux windows osx bsd open-source cloud-paas python

ossec

OSSEC is an Open Source Host-based Intrusion Detection System. It performs log analysis, integrity checking, Windows registry monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, OpenBSD, FreeBSD, Mac OS X, Solaris and Windows

     

open-source security hardening linux windows solaris osx bsd

Zed Attack Proxy (ZAP)

A penetration testing tool for finding vulnerabilities in web applications, from OWASP

     

linux windows osx open-source security

Packer

Packer is a tool for creating identical machine images for multiple platforms (like VirtualBox, VMWare, EC2, DigitalOcean, etc) from a single configuration file.

     

linux windows osx open-source virt cloud-paas go

Pallet

A tool to provision and maintain servers across various cloud platforms as well as virtual machine platforms, without any dependencies. Provides cloud and operating system independence.

     

linux windows osx open-source cloud-paas clojure

Pulumi

Create, deploy, and manage Cloud Native infrastructure, as real code. A single toolset for infrastructure, managed services, containers, and serverless environments on any cloud infrastructure. You get all the benefits of real programming languages; IDEs, abstractions and reuse thanks to functions, classes, and packages, debugging, testability, and more

     

linux windows osx open-source cloud-paas go javascript python

TeamPass

TeamPass is a Collaborative Passwords Manager. Its aim is to provide the ability to share password items through a secured and managed environment.

     

linux windows osx bsd solaris open-source security

Terraform

Terraform provides a common configuration to launch infrastructure from different providers (AWS, Digital Ocean, Heroku, etc.). It provides dependency resolution to make sure that your infrastructure is created in the right order

     

linux windows osx open-source cloud-paas go

Vault

Manage Secrets and Protect Sensitive Data. Secure, store and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets and other sensitive data using a UI, CLI, or HTTP API.

     

linux windows osx bsd solaris open-source comercial security

Vaurien

A Chaos Monkey for TCP, it randomly disconnects or stalls TCP connections in your application to test application tolerance and high availability. Makes sure you correctly handle these unexpected events

     

linux windows osx open-source security python