awesome-repositories.com
Blog
MCP
awesome-repositories.com

Descoperă cele mai bune repository-uri open source cu căutare AI.

ExploreazăCăutări recomandateAlternative open-sourceSoftware self-hostedBlogHartă site
ProiectDespreCum realizăm clasamentulPresăServer MCP
LegalConfidențialitateTermeni
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
deepfence avatar

deepfence/ThreatMapper

0
View on GitHub↗
5,282 stele·636 fork-uri·TypeScript·Apache-2.0·3 vizualizărithreatmapper.org↗

ThreatMapper

ThreatMapper este o platformă de protecție a aplicațiilor cloud-native și un scaner de securitate a infrastructurii. Funcționează ca un sistem de gestionare a vulnerabilităților și un colector de telemetrie pentru workload-urile cloud, conceput pentru a monitoriza workload-urile și a detecta riscurile de securitate în medii cloud și containerizate.

Platforma se distinge printr-un vizualizator de trafic de rețea care utilizează machine learning pentru a clasifica tiparele de comunicare și un sistem de mapare a atacurilor bazat pe grafuri pentru a identifica căile de înaltă riscuri între vulnerabilități și dependențele de rețea.

Capabilitățile sale mai largi acoperă auditarea conformității infrastructurii cloud față de benchmark-urile de securitate, detectarea amenințărilor în producție pentru malware și secrete expuse, precum și colectarea pachetelor de rețea și a telemetriei workload-urilor prin senzori distribuiți.

Deployment-ul componentelor de scanare în medii cloud, clustere și mașini virtuale este gestionat prin instrumente de containerizare și infrastructură ca cod (IaC).

Features

  • Attack Path Visualizations - Maps security vulnerabilities and network dependencies into a visual graph to identify high-risk attack paths.
  • Vulnerability Detection - Identifies vulnerable software components and security misconfigurations in production workloads.
  • ML-Based Flow Classifiers - Analyzes packet headers using machine learning to categorize and identify specific network communication patterns.
  • ML-Based Classifiers - Categorizes network communication patterns by analyzing packet headers through machine learning models.
  • Cloud-Native Application Protection Platforms - Provides a unified platform combining vulnerability scanning and threat detection to protect cloud workloads.
  • Compliance Security Audits - Queries cloud provider APIs to audit infrastructure settings against industry security benchmarks.
  • Runtime Threat Detection - Identifies security threats in real-time across cloud, serverless, and container platforms.
  • Cloud Compliance Auditors - Evaluates cloud infrastructure against security benchmarks and industry standards to find configuration errors.
  • Cloud Security Posture Scanners - Audits cloud configurations and resources against compliance benchmarks to identify security misconfigurations.
  • Vulnerability Management Systems - Detects vulnerable software components and exposed secrets within production containers and file systems.
  • Network Traffic Analysis - Collects and classifies network flows across distributed hosts to understand communication patterns.
  • Network Traffic Dashboards - Visualizes network traffic flows and communication patterns between services using machine learning classification.
  • Telemetry Collection - Gathers service discovery data, telemetry, and software dependencies from production platforms using agent-based and agent-less monitoring.
  • Agent-Based Collectors - Provides lightweight distributed sensors to gather workload data and network packets across cloud environments.
  • Telemetry Collectors - Gathers service discovery data and software dependencies from distributed hosts and clusters via agent-based monitoring.
  • Azure Compliance Scanners - Evaluates Azure cloud resources against security controls and benchmarks to identify misconfigurations.
  • Distributed Security Scanning Frameworks - Deploys containerized scanning components across diverse environments to detect vulnerabilities and secrets in production.
  • Malware Scanning - Scans containers and file systems using predefined rule sets to identify known indicators of compromise.
  • Secret Scanning - Locates unprotected tokens and authentication keys within containers and file systems.
  • Pattern-Based Detection - Scans containers and file systems using pattern-matching rules to detect known indicators of malware.
  • Packet Collection Systems - Gathers network traffic data from distributed hosts, cloud environments, and clusters using lightweight tools.
  • Container Security - Runtime vulnerability scanner for Kubernetes and serverless.
  • Security and Vulnerability Scanning - Runtime vulnerability scanning for containers and serverless environments.
  • Defending - Listed in the “Defending” section of the Awesome K8s Security awesome list.
  • Application Security - Identifies vulnerabilities in running container environments.
  • Cloud Security - Runtime vulnerability and compliance scanner for cloud environments.
  • Compliance and Monitoring - Hunts and ranks vulnerabilities in production environments.
  • Container and Cluster Security - Production vulnerability scanner and attack path identification tool.
  • Dependency Management - Runtime vulnerability scanner for containers and serverless environments.
  • Security and Compliance - Runtime vulnerability scanner for containers and virtual machines.
  • Securitate și consolidare - Runtime vulnerability scanner for containerized environments.
  • Testing Tools - Tool for mapping and scanning vulnerabilities in cloud-native environments.
  • Vulnerability Scanning - Scans for vulnerabilities in runtime environments.

Istoric stele

Graficul istoricului de stele pentru deepfence/threatmapperGraficul istoricului de stele pentru deepfence/threatmapper

Căutare AI

Explorează mai multe repository-uri excelente

Descrie ce ai nevoie în limbaj simplu — AI-ul sortează mii de proiecte open source selectate în funcție de relevanță.

Start searching with AI

Întrebări frecvente

Ce face deepfence/threatmapper?

ThreatMapper este o platformă de protecție a aplicațiilor cloud-native și un scaner de securitate a infrastructurii. Funcționează ca un sistem de gestionare a vulnerabilităților și un colector de telemetrie pentru workload-urile cloud, conceput pentru a monitoriza workload-urile și a detecta riscurile de securitate în medii cloud și containerizate.

Care sunt principalele funcționalități ale deepfence/threatmapper?

Principalele funcționalități ale deepfence/threatmapper sunt: Attack Path Visualizations, Vulnerability Detection, ML-Based Flow Classifiers, ML-Based Classifiers, Cloud-Native Application Protection Platforms, Compliance Security Audits, Runtime Threat Detection, Cloud Compliance Auditors.

Care sunt câteva alternative open-source pentru deepfence/threatmapper?

Alternativele open-source pentru deepfence/threatmapper includ: bridgecrewio/checkov — Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as… aquasecurity/kube-bench — kube-bench is a Kubernetes security benchmark scanner and configuration auditor. It verifies if a cluster adheres to… aquasecurity/trivy — Trivy is a comprehensive security scanner designed to identify vulnerabilities and misconfigurations across container… falcosecurity/falco — Falco is an eBPF runtime security monitor and cloud native detection engine that identifies abnormal behavior and… aquasecurity/kube-hunter — Kube-hunter is a security scanner and vulnerability hunter for Kubernetes clusters. It operates as a cloud-native… armosec/kubescape — Kubescape is a security platform for Kubernetes that provides tools for scanning clusters, configurations, and…

Alternative open-source pentru ThreatMapper

Proiecte open-source similare, clasificate după numărul de funcționalități comune cu ThreatMapper.
  • bridgecrewio/checkovAvatar bridgecrewio

    bridgecrewio/checkov

    8,798Vezi pe GitHub↗

    Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as code, container images, and Kubernetes configurations. It functions as a cloud security posture tool, an SCA vulnerability scanner, and a secret scanning utility to prevent security breaches and version control leaks. The project distinguishes itself through deep graph analysis and variable resolution, allowing it to map relationships between interconnected resources and evaluate the final state of infrastructure attributes. It provides extensibility for defining custom security

    Python
    Vezi pe GitHub↗8,798
  • aquasecurity/kube-benchAvatar aquasecurity

    aquasecurity/kube-bench

    8,078Vezi pe GitHub↗

    kube-bench is a Kubernetes security benchmark scanner and configuration auditor. It verifies if a cluster adheres to the Center for Internet Security standards and other hardening guides to identify security misconfigurations and vulnerabilities. The tool operates as a containerized security scanner, utilizing host namespaces to analyze nodes and control plane components without requiring the installation of binaries directly on the host. It supports multiple Kubernetes distributions, applying environment-specific benchmarks to ensure auditing accuracy for managed services. The project cover

    Go
    Vezi pe GitHub↗8,078
  • aquasecurity/trivyAvatar aquasecurity

    aquasecurity/trivy

    36,462Vezi pe GitHub↗

    Trivy is a comprehensive security scanner designed to identify vulnerabilities and misconfigurations across container images, filesystems, and infrastructure as code files. It functions as a software composition analysis tool and an infrastructure security scanner, providing automated checks for CI/CD pipelines and cloud environments to ensure the integrity of the software supply chain. The tool distinguishes itself through a modular, plugin-based architecture that allows for the independent inspection of diverse targets. It utilizes a declarative policy engine to evaluate configurations agai

    Gocontainersdevsecopsdocker
    Vezi pe GitHub↗36,462
  • falcosecurity/falcoAvatar falcosecurity

    falcosecurity/falco

    8,670Vezi pe GitHub↗

    Falco is an eBPF runtime security monitor and cloud native detection engine that identifies abnormal behavior and security threats across hosts and containers. It functions as a Linux kernel event auditor, capturing system calls and kernel events in real-time to detect malicious activity. The system distinguishes itself through a rule-based threat detection model that evaluates system activity against a library of community-maintained rules and custom security definitions. It enriches raw kernel events with container and Kubernetes metadata to provide observability into isolated environments

    C++cloud-nativecncfcncf-project
    Vezi pe GitHub↗8,670
Vezi toate cele 30 alternative pentru ThreatMapper→