aquasecurity/cloudsploit
Cloudsploit
Cloudsploit is a cloud security posture management tool and multi-cloud security auditor. It audits cloud infrastructure for misconfigurations and compliance risks across multiple providers, specifically AWS and Azure, by evaluating resource configurations against a set of security plugins.
The project functions as a cloud compliance scanner that maps infrastructure scan results to regulatory frameworks and security policy standards. It also serves as an automated cloud remediation tool, executing corrective actions to fix detected misconfigurations via SDK calls.
The system covers resource risk analysis and security scanning, allowing for the development of custom security plugins to define specialized test logic. It includes capabilities for cross-account role scanning, finding suppression using regular expressions, and the export of audit results into formats such as JSON, CSV, and JUnit.
The scanner utilizes API response caching to reduce redundant network requests across plugins and provides visualization for security findings through printable reports and a visual interface.
Features
- Cloud Infrastructure Security - Audits cloud infrastructure across multiple accounts for security misconfigurations using specialized plugins.
- Cloud Compliance Auditors - Maps cloud infrastructure scan results to regulatory frameworks and security policy standards for compliance auditing.
- Security Risk Assessments - Evaluates collected cloud data against security rules to assign risk levels from pass to fail.
- Compliance Mapping Tools - Maps security scan results to industry-standard regulatory frameworks to evaluate compliance.
- Automated Configuration Remediation - Implements automated mechanisms to fix identified security misconfigurations in cloud infrastructure.
- Cloud Infrastructure Security Auditors - Evaluates AWS and Azure resource configurations against security plugins to identify risks.
- Cloud Security Posture Management - Provides a centralized platform for tracking and visualizing the security posture of AWS and Azure environments.
- Azure Misconfiguration Detectors - Detects security risks and benchmark violations specifically within Azure infrastructure.
- AWS - Performs automated security audits of AWS resource settings and access controls.
- Modular Scanning Engines - Uses a modular engine to execute a library of security check plugins across cloud environments.
- Scan Result Visualizers - Displays security findings through a visual interface and printable reports for easier analysis.
- Cloud Infrastructure Data Collection - Fetches infrastructure resource data from cloud providers via API calls to prepare for security analysis.
- Cloud Resource Discovery - Provides automated discovery of cloud infrastructure state via authenticated API requests to cloud providers.
- Multi-Account Scanning - Audits multiple cloud subscriptions or accounts in a single pass using authorized roles.
- Scan Result Exporters - Writes security scan findings to structured formats like JSON, CSV, and JUnit for external reporting.
- Cloud Provider Abstraction Layers - Provides a unified abstraction layer to standardize security scanning logic across AWS and Azure.
- Cloud Resource Risk Analysis - Evaluates cloud infrastructure data to identify and assign risk levels to misconfigured resources.
- Custom Security Scan Extensions - Offers a pluggable architecture for defining custom security tests and API probes.
- Security Finding Management - Excludes known risks from scan results using regular expressions to manage security findings.
- Cloud Security - Detection of security risks in cloud infrastructure.
- Cloud and Container Security - Automated cloud infrastructure security scanning.
