A comprehensive resource for securing Active Directory, including attack methods and effective defenses.
#security-audit tools
69 results
A free online tool that scans and fixes common security issues in WordPress websites.
Altoro Mutual offers online banking, real estate financing, business credit cards, retirement solutions, and prioritizes privacy and security.
Automate your reconnaissance process with AttackSurfaceMapper, a tool for mapping and analyzing network attack surfaces.
Track user activity and API usage on AWS and in hybrid and multicloud environments.
Detect off-instance key usage in AWS by analyzing CloudTrail files locally.
AWS Scout2 is a security tool for AWS administrators to assess their environment's security posture.
Analyzes CloudTrail data of a given AWS account and generates a summary of recently active IAM principals, API calls they made, as well as regions, IP addresses and user agents they used.
Bastille-Linux is a system hardening program that proactively configures the system for increased security and educates users about security settings.
Patch-level verification tool for bundler to check for vulnerable gems and insecure sources.
A Burp extension for scanning JavaScript files for endpoint links
CFRipper is a Library and CLI security analyzer for AWS CloudFormation templates.
Fast and simple way to check any HTTP Headers
Static code analysis tool for infrastructure as code (IaC) and software composition analysis (SCA) with over 1000 built-in policies for AWS, Azure, and Google Cloud.
A Python script to check system compliance against CIS Benchmarks with customizable options.
Identifies misconfigured CloudFront domains vulnerable to hijacking
A tool to analyze and audit AWS environments for security issues and misconfigurations.
A tool for identifying potential security vulnerabilities in dependency configurations by checking for lingering free namespaces for private package names.
Conmachi is a Golang tool for scanning container environments for security issues.
Guidelines for contributing to a cybersecurity tools and resources list
A tool to scan for CORS misconfigurations in web applications
Crt.sh is a website that allows users to search for SSL/TLS certificates of a targeted domain, providing transparency into certificate logs.
A plugin for viewing, detecting weak configurations, and generating Content Security Policy headers.
Open-Source framework for detecting and preventing dependency confusion leakage with a holistic approach and wide technology support.
Load more tools
Showing 24 of 69