Open Source Cloud Security
An enterprise-grade, agentless, and open-source cloud security platform for AWS, GCP, and Azure that combines CSPM, DSPM, CIEM, ASM, and vulnerability management with deterministic YAML policies and natural language querying.
A set of tutorials to learn how to automate various Prisma Cloud tasks.
Multi-cloud xSPM platform to scan, visualize, and remediate security risks across cloud, containers, and Kubernetes environments.
CIEM (Cloud Infrastructure Entitlement Management) platform for Zero Trust IAM - Excessive permissions detection, least-privilege scoring, and entitlement risk analysis
An MCP server to enumerate AWS IAM data, analyze effective permissions, and visualize access relationships across users, roles, and resources. Built for cloud security engineers who want fast, easy and effective insights into AWS identity risk
Air-gapped, deterministic AWS/Azure/GCP IAM privilege-escalation scanner — Terraform PR-gate, MCP for Cursor/Claude Code, offline licensing. Runs on your own metal.
🔍 Enhance cloud security visibility across AWS, GCP, and Azure with open-source tools for misconfiguration, data discovery, and vulnerability management.
Open-source, self-hosted Azure & Microsoft Entra access governance with ISO 27001 / SOC 2 compliance evidence — Policy & RBAC visibility, drift detection, and reviewed just-in-time access with auto-expiry. A lightweight alternative to Entra ID Governance, PIM, and per-seat GRC.
Agentless GCP drift-detection canary — projects, VMs, firewall rules, buckets, service accounts, SA keys, IAM bindings, and AI-workload signals; every delta to Slack. Identity is the attack surface. Detection half of paved-org.
Predictive Multi-Cloud Identity Security & CI/CD Guard. Detect escalation paths, analyze dynamic privilege usage, and block risky IAM changes in the pipeline
Security engineering platform focused on identity, configuration, and workload security, built on a staged on-prem foundation with Elastic telemetry and controlled Kubernetes and cloud integrations.
Sonrai Security is a cloud identity and access security company whose Cloud Permissions Firewall (CPF) enforces least-privilege access across AWS, Azure, and Google Cloud by quarantining unused IAM identities, protecting sensitive permissions, and disabling unused services and regions without disrupting developers.
Cyscale is an agentless, cloud-native application protection platform (CNAPP) that continuously monitors multi-cloud environments to surface, contextualize, and prioritize security risk.
Ermetic is a cloud security company founded in 2019 that pioneered cloud infrastructure entitlement management (CIEM) as part of a unified, identity-first cloud-native application protection platform (CNAPP) spanning AWS, Azure, and GCP.
Orca Security is an agentless cloud security platform that uses its patented SideScanning technology to provide visibility into risks across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, and serverless environments, covering CSPM, CWPP, CIEM, DSPM, vulnerability management, malware detection, API security, and AI security in a single…
Add a description, image, and links to the ciem topic page so that developers can more easily learn about it.
To associate your repository with the ciem topic, visit your repo's landing page and select "manage topics."