Various resources we found helpful to clients in our travels.



• https://asecure.cloud/ - Excellent place to pull SCPs from, also terraform and CloudFormation ready to go
• https://cloudsecdocs.com/ - A collection of Cloud Security resources
• https://github.com/toniblyx/my-arsenal-of-aws-security-tools
• markofu's Gists
• https://github.com/z0ph/MAMIP - AWS Managed Security Polices Index

• AWS Security Incident Response Whitepaper
• mandatoryprogrammer's tarnish chrome extension
• Segmentio's AWS Okta
• Versent's saml2aws

• Manatee - Configuration Drift
• Refactr - DevOps Automation
• Open Policy Agent - Policy Framework
• https://slscan.io/en/latest/
• https://atomist.com/
• https://www.tines.com/
• https://nops.io/
• https://www.fugue.co/

• https://www.lacework.com/
• https://github.com/OpenCSPM/opencspm
• https://www.shujinko.io/
• https://tenacitycloud.com/
• https://www.argos-security.io/

• https://anchore.com/
• https://github.com/quay/clair
• https://github.com/eliasgranderubio/dagda/

• https://github.com/cloud-security-labs/infosec-reports - collection of previous and current information security reports

• https://www.shiftleft.io/
• https://indeni.com/
• https://www.veracode.com/
• https://checkmarx.com/

• https://dev-sec.io/

• https://tailscale.com/
• https://www.twingate.com/
• https://www.cloudflare.com/teams/
• AWS Client VPN

• Cloud Security Labs: https://cloudsecuritylabs.io/blog/what-is-zero-trust/

• https://www.osohq.com/
• https://www.aserto.com/
• https://www.openpolicyagent.org/

• https://portswigger.net/web-security
• https://www.youtube.com/c/RanaKhalil101
• https://sudo.pagerduty.com/

• https://urlscan.io/
• https://www.shodan.io/
  • See https://2000.shodan.io/#/ for live examples!

• https://www.gitguardian.com/
• https://github.com/bridgecrewio/checkov
• https://snyk.io/



• https://www.goldfiglabs.com/guide/saas-cto-security-checklist/
• https://s3-eu-west-1.amazonaws.com/sqreen-assets/whitepapers/SaaS+CTO+Security+Checklist.pdf
• https://scrty.io/

• https://www.wallarm.com/
• https://www.traceable.ai/



• https://hyperproof.io/
• http://www.6clicks.com/
• https://tugboatlogic.com/



• https://interlaced.io/
• https://www.electric.ai/
• https://www.bayport.net/
• https://www.mann.com/