Netflix/security_monkeyArchived
Security Monkey
Security Monkey is a cloud security posture management tool and configuration auditor. It functions as a monitoring platform that tracks cloud assets and records state changes to identify when security policies are altered or insecure configurations are introduced.
The system maintains a multi-cloud asset inventory, tracking resources across AWS, GCP, OpenStack, and GitHub organizations. It provides a centralized interface for searching and browsing assets across multiple cloud providers and regions.
The platform covers cloud security auditing and infrastructure change tracking by comparing historical states of resources to detect configuration drift. It utilizes provider-based discovery and unified resource indexing to monitor assets and policies over time.
Features
- Cloud Security Monitoring - Audits and monitors cloud infrastructure configurations and permissions to detect insecure settings over time.
- Cloud Asset Discoverers - Queries cloud provider APIs to identify, list, and track infrastructure resources across multiple environments.
- State Snapshots - Detects configuration drift by comparing current resource states against stored historical snapshots.
- Cloud Asset Inventory Managers - Maintains a global inventory of assets by consolidating resource lists from AWS, GCP, OpenStack, and GitHub.
- Infrastructure Change Tracking - Records and compares historical states of cloud resources to identify precisely how configurations were modified.
- Cloud Resource Inventory - Catalogs and tracks deployed cloud infrastructure components across multiple providers in a centralized inventory.
- Unified Resource Models - Normalizes disparate data formats from multiple cloud providers into a consistent model for cross-platform security auditing.
- Cloud Infrastructure Security Auditors - Analyzes multi-cloud resource configurations against security rules to identify when policies are altered.
- Cloud Security Posture Management - Tracks and visualizes the security state of cloud accounts to detect insecure configurations and prioritize risk.
- Cloud Asset Discovery Plugins - Utilizes provider-specific connector plugins to discover assets and fetch configurations from cloud and version control APIs.
- Administrative Change Auditing - Maintains a verifiable history of administrative configuration changes to track when security policies were altered.
- Configuration Delta Monitoring - Monitors assets and policy changes over time to detect insecure configurations and compliance drift.
- Cloud Resource Search - Provides a unified interface to search and browse cloud resources across different providers, regions, and accounts.
- Detector-Based Plugin Architectures - Implements a modular architecture where individual security vulnerability checks are developed as independent detector plugins.
- Resource Change Monitors - Schedules periodic scans to monitor and alert on configuration changes and resource drift across cloud accounts.
- Infrastructure Services - Monitors cloud infrastructure for security and configuration changes.
- Systems And Services - Listed in the “Systems And Services” section of the The Book Of Secret Knowledge awesome list.
