gcp-security

Star

Here are 27 public repositories matching this topic...

Language:All

Filter by language

All27 HCL8 Python5 Go4 Shell3 JavaScript1 Lua1 PowerShell1

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

tenable /terrascan

Star4.9k

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

kubernetes infrastructure aws security devops terraform architecture iac infrastructure-as-code scans aws-security security-tools cloudsecurity devsecops cloud-security sast azure-security gcp-security terrascan security-violations

UpdatedDec 10, 2024
Go

jassics /security-study-plan

Star4.6k

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner

UpdatedJan 29, 2025

4ndersonLin /awesome-cloud-security

Star2.1k

🛡️ Awesome Cloud Security Resources ⚔️

aws security azure gcp cybersecurity cloud-computing aws-security cloud-security azure-security gcp-security

UpdatedNov 8, 2024

DataDog /stratus-red-team

Star2k

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

aws security aws-security cloud-security azure-security mitre-attack adversary-emulation threat-detection purple-team gcp-security kubernetes-security detection-engineering cloud-native-security

UpdatedMar 18, 2025
Go

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

terraform aws-security goat devsecops cloud-security azure-security gcp-security

UpdatedSep 13, 2024
HCL

jonrau1 /ElectricEye

Star984

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

aws security-audit compliance aws-security security-tools devsecops security-engineering cloud-security asset-management multicloud aws-audit cloud-auditing security-monitoring cloud-compliance-reporting gcp-security security-hub aws-compliance saas-security attack-surface-management google-cloud-security

UpdatedFeb 16, 2025
Python

HXSecurity /TerraformGoat

Star569

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

security terraform gcp aws-security cloudsecurity cloud-security azure-security gcp-security kubernetes-security

UpdatedNov 30, 2022
HCL

cado-security /cloudgrep

Star324

cloudgrep is grep for cloud storage

search aws cloud azure aws-s3 gcp grep aws-security cloud-security azure-security gcp-security

UpdatedFeb 26, 2025
Python

riskprofiler /CloudFrontier

Star124

Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.

aws digitalocean serverless azure api-gateway dynamodb lambda-functions gcp oracle cybersecurity serverless-framework cyber-security aws-security cloudsecurity cloud-security azure-security gcp-security shadowrisk shadow-risk

UpdatedMar 29, 2024
Lua

DenizParlak /hayat

Star80

Hayat is a script for report and analyze Google Cloud Platform resources.

cloud gcp hardening gcp-cloud-functions gcp-hardening gcp-security

UpdatedJan 7, 2020
Shell

anrbn /GCP-Attack-Defense

Star60

A Project dedicated to documenting various attack and detection vectors that can be encountered within Google Cloud Platform (GCP).

gcp google-cloud-platform privilege-escalation cloud-security gcp-security gcp-functions

UpdatedApr 10, 2024
Python

offensive-terraform /offensive-terraform.github.io

Star44

Offensive Terraform Website

docker aws azure terraform gcp offensive-security terraform-modules aws-security cloud-security azure-security gcp-security attack-modules terraform-security

UpdatedOct 8, 2020
JavaScript

lightspin-tech /lightspin-2022-top-7-attack-paths

Star39

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

ttps aws-security cloudsecurity cloud-security attack-surface azure-security mitre-attack gcp-security attack-paths azuresecurity awssecurity

UpdatedAug 8, 2022

eshlomo1 /CloudSec

Star21

Welcome to the Cloud Security Toolkit repository, your all-in-one destination for cutting-edge cloud security resources! Whether you're diving into offensive strategies, mastering threat hunting, or bolstering your blue-team defenses, this repo has you covered.

microsoft azure incident-response dfir threat-hunting siem soc aws-security cloudsecurity threat-intelligence cloud-security azure-security kql gcp-security microsoft-sentinel microsoftsentinel cfir