Browse & filter

Open security platform combining SIEM, XDR, file integrity monitoring, and compliance checks across endpoints and cloud.

Host-based security auditing for Unix: misconfigurations, packages, SSH, kernel hardening hints.

CLI and library for generating SBOMs (SPDX, CycloneDX) from images, directories, and archives.

Expose OS state as SQL tables—processes, sockets, users, browser extensions—for fleet visibility and compliance.

Full vulnerability management stack: OpenVAS scanner, Greenbone Vulnerability Manager, feeds, and web UI for scan management.

SCAP toolkit for compliance scanning: Oval, XCCDF, tailoring files, and remediation snippets (e.g. DISA STIG workflows).

CIS Kubernetes benchmark checker: run checks against nodes, control plane, etcd, and policies with readable reports.

Open cloud security assessment for AWS, Azure, GCP, and M365: CIS, PCI, HIPAA-style checks and compliance reports.

Host-based IDS: log analysis, file integrity monitoring, rootcheck, and active response—ancestor lineage to Wazuh.

Kubernetes security scanner for misconfigurations, RBAC, compliance frameworks (NSA/CIS), and image vulnerabilities.

SQL layer over cloud and SaaS APIs—compose compliance and inventory queries across AWS, Azure, GCP, GitHub, Okta, and hundreds of plugins.

Rules engine for public cloud governance: tag enforcement, unused resource cleanup, KMS/SG checks, and compliance filters across AWS/Azure/GCP.