gcp-security

Star

Here are 30 public repositories matching this topic...

Language: All

Filter by language

All 30 HCL 8 Python 6 Go 5 Shell 3 Java 1 JavaScript 1 Lua 1 PowerShell 1

Sort: Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

terrascan

tenable / terrascan

Star 5.2k

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

kubernetes infrastructure aws security devops terraform architecture iac infrastructure-as-code scans aws-security security-tools cloudsecurity devsecops cloud-security sast azure-security gcp-security terrascan security-violations

Updated Jul 31, 2025
Go

jassics / security-study-plan

Star 4.7k

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner

Updated Jul 29, 2025

4ndersonLin / awesome-cloud-security

Star 2.3k

🛡️ Awesome Cloud Security Resources ⚔️

aws security azure gcp cybersecurity cloud-computing aws-security cloud-security azure-security gcp-security

Updated Nov 8, 2024

DataDog / stratus-red-team

Star 2.2k

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

aws security aws-security cloud-security azure-security mitre-attack adversary-emulation threat-detection purple-team gcp-security kubernetes-security detection-engineering cloud-native-security

Updated Oct 2, 2025
Go

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

terraform aws-security goat devsecops cloud-security azure-security gcp-security

Updated Jul 13, 2025
HCL

ElectricEye

jonrau1 / ElectricEye

Star 1k

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

aws security-audit compliance aws-security security-tools devsecops security-engineering cloud-security asset-management multicloud aws-audit cloud-auditing security-monitoring cloud-compliance-reporting gcp-security security-hub aws-compliance saas-security attack-surface-management google-cloud-security

Updated Oct 13, 2025
Python

HXSecurity / TerraformGoat

Star 610

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

security terraform gcp aws-security cloudsecurity cloud-security azure-security gcp-security kubernetes-security

Updated Nov 30, 2022
HCL

cado-security / cloudgrep

Star 325

cloudgrep is grep for cloud storage

search aws cloud azure aws-s3 gcp grep aws-security cloud-security azure-security gcp-security

Updated Feb 26, 2025
Python

antgroup / CloudRec

Star 162

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

security cloud cybersecurity opa scans aws-security multi-cloud devsecops cloud-security alibabacloud gcp-security cspm

Updated Oct 15, 2025
Java

riskprofiler / CloudFrontier

Star 127

Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.

aws digitalocean serverless azure api-gateway dynamodb lambda-functions gcp oracle cybersecurity serverless-framework cyber-security aws-security cloudsecurity cloud-security azure-security gcp-security shadowrisk shadow-risk

Updated Oct 12, 2025
Lua

DenizParlak / hayat

Star 81

Hayat is a script for report and analyze Google Cloud Platform resources.

cloud gcp hardening gcp-cloud-functions gcp-hardening gcp-security

Updated Jan 7, 2020
Shell

GCP-Attack-Defense

anrbn / GCP-Attack-Defense

Star 61

A Project dedicated to documenting various attack and detection vectors that can be encountered within Google Cloud Platform (GCP).

gcp google-cloud-platform privilege-escalation cloud-security gcp-security gcp-functions

Updated Apr 10, 2024
Python

offensive-terraform.github.io

offensive-terraform / offensive-terraform.github.io

Star 45

Offensive Terraform Website

docker aws azure terraform gcp offensive-security terraform-modules aws-security cloud-security azure-security gcp-security attack-modules terraform-security

Updated Oct 8, 2020
JavaScript

lightspin-tech / lightspin-2022-top-7-attack-paths

Star 40

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

ttps aws-security cloudsecurity cloud-security attack-surface azure-security mitre-attack gcp-security attack-paths azuresecurity awssecurity

Updated Aug 8, 2022

eshlomo1 / CloudSec

Star 36

Welcome to the Cloud Security Toolkit repository, your all-in-one destination for cutting-edge cloud security resources! Whether you're diving into offensive strategies, mastering threat hunting, or bolstering your blue-team defenses, this repo has you covered.