Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

🛡️ Open-source and next-generation Web Application Firewall (WAF)

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Easily configure macOS security settings from the terminal.

Automated System Hardening Framework

Better AWS SSM Session manager CLI client

Security Auditor Utility for GraphQL APIs

h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply

Simple command line tool to check for compliance against CIS Benchmarks

Android Mobile Device Hardening

RouterOS Security Inspector

Harden the world is a community driven project to develop hardening guidelines and checklists for common software and devices.

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

Bootstrap script for Amazon Linux to comply CIS Amazon Linux Benchmark v2.0.0

A wordpress security auditor! Audit your wordpress application for security issues with even 1 request.

Safer Python with types for untrusted input

ArchLinux setup which focuses on desktop security

Tool to check compliance with CIS Linux Benchmarks, specifically Distribution Independent, Debian 9 and Ubuntu 18.04 LTS, and generate spreadsheet and report of result.

Scanner for Gitlab Security Mis-Configurations

BAT is a tool to help everyone to securing their web-servers.