Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

InSpec: Auditing and Testing Framework

Security automation content in SCAP, Bash, Ansible, and other formats

Open Source Cloud Native Application Protection Platform (CNAPP)

Security scanner for your Terraform code

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

NIST Certified SCAP 1.2 toolkit

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

Wazuh - Docker containers

Wazuh - Project documentation

HardeningKitty and Windows Hardening Settings

A suite of tools to automate software compliance checks.

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber