cspm 开源项目推荐（298 个）

prowler-cloud /prowler

Prowler是世界上使用最广泛的开源云安全平台，可在任何云环境中自动实现安全和合规性。

turbot /steampipe

Zero-ETL，无限可能。通过 SQL 实现实时查询 API、代码及更多功能。无需数据库。

cloudquery /cloudquery

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

deepfence /ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)

aquasecurity /cloudsploit

Cloud Security Posture Management (CSPM)

someengineering /fixinventory

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

HummerRisk /HummerRisk

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

stackql /stackql

Query, provision and operate Cloud, SaaS, API and Model Context Protocol (MCP) resources through a unified SQL-based framework for humans and AI agents.

cloudgraphdev /cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

Zeus-Labs /ZeusCloud

Open Source Cloud Security

opengovern /opensecurity

opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.

selefra /selefra

The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).

turbot /powerpipe

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

OpenCSPM /opencspm

Open Cloud Security Posture Management Engine

openraven /magpie

A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.

someengineering /cloud-security-list

A list of cloud security tools and vendors.

antgroup /CloudRec

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

goldfiglabs /rpCheckup

rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.

transilienceai /shasta

Transilience——Shasta 是开源、GA 前的 AI 与云安全平台。支持 GCP、AWS 和 Azure，以及 14 个安全与合规框架

fabriziosalmi /wildbox

An open-source security platform for the community. Unified SIEM, SOAR, WAF, and more in a single, self-hosted solution.