Kexa

ct! If you're interested check out website we also have an offer with dashboard, no-code rule builder,..

itially targeting AWS, GCP, Azure). Instead of just reporting issues, this agent will aim to provide proactive, actionable recommendations and potentially automate certain remediation tasks to simplify cloud security management and hardening. We'd love for the HN community to check out the open-source project on GitHub. Feedback on the concept or the current tool is highly welcome, and a star if you find it interesting helps others discover the project! If the upcoming AI-powered cloud security agent sounds interesting, we'd be particularly keen to hear your thoughts or if you might be interested in joining the beta (~June 2025). thank you !!

hat can already be used in the current state : - Azure, AWS, GCP : - Check for orphan resources (costs optimizations) - Verify dangerous network rules (security) - Ensure tags are compliant with standards (compliance) - Verify for secrets or token rotation/expiration (security) - Ensure user are using MFA (security) - Kubernetes : - Ensure pods are running (operational excellence) - Ensure names compliance (compliance) - Github - Ensure runners are online (operational excellence) - Ensure branches are protected (security) - HTTP - Check for certificates expiration or presence (security) - Check for response code (operational excellence) The notification system allow you to be notified by Mail, SMS, Teams, Webhook as well as setting different alert level and channel for each rules file you're editing. CIS Benchmarks have been followed by our Teams to create a set of rules for Azure, that will allow you to have a quick report on your compliance to those Benchmarks ! More CIS Benchmarks rules are coming for all providers, inform us if you're interested. We've developed a SaaS where you can visualize Kexa scans results and historic, and explore the resources that raised the error. *How can you run it ?* In any cloud functions, with the Github action available here: https://github.com/marketplace/actions/kexa-action Or even locally if you want a quick report on a set of rules (ex: CIS Benchmarks rules that are available as Kexa rules for Azure and more to come) If you're interested, you can follow the documentation here : https://github.com/4urcloud/Kexa/blob/main/documentation/Doc... And if you like the project, do not forget to star us on Github ! https://github.com/4urcloud/Kexa Thank you for reading, hoping i'll have your feedback on this

ur rules system and automate object gathering. Developers can also add new cloud service addons! Visit our Open Source repository: https://github.com/4urcloud/Kexa

https://kexa.io Do not forget to star us on Github ! https://github.com/4urcloud/Kexa

ces, and underutilized resources, it has the potential to significantly reduce your cloud infrastructure costs. 2. Conformity and Compliance: Kexa can ensure your cloud projects conformity to best practices and compliance guidelines, reducing the risk of costly security breaches and regulatory fines. 3. Optimization: Fine-tune your cloud configurations for optimal performance, whether you're using AWS, Azure, Google Cloud, or other provider, it can find opportunities for improvement. 4. Extensibility and Community: It is open-source : adapt it to your specific needs, create and share addons to enhance its functionality with the community. 5. Easy to deploy: Integrate Kexa into your pipelines easily and deploy it anywhere without difficulties. Get Started : You can find the open-source code and documentation on our GitHub repository: Feel free to explore and contribute ! [https://github.com/4urcloud/Kexa](https://github.com/4urclou... Kexa also have a public website if you need more information : [https://www.kexa.io](https://www.kexa.io/)

precise triggers for initiating these scans. Why Kexa : 1. Cost Savings: By identifying inefficiencies, redundant services, and underutilized resources, it has the potential to significantly reduce your cloud infrastructure costs. 2. Conformity and Compliance: Kexa can ensure your cloud projects conformity to best practices and compliance guidelines, reducing the risk of costly security breaches and regulatory fines. 3. Optimization: Fine-tune your cloud configurations for optimal performance, whether you're using AWS, Azure, Google Cloud, or other provider, it can find opportunities for improvement. 4. Extensibility and Community: It is open-source : adapt it to your specific needs, create and share addons to enhance its functionality with the community. 5. Easy to deploy: Integrate Kexa into your pipelines easily and deploy it anywhere without difficulties. Get Started : You can find the open-source code and documentation on our GitHub repository: Feel free to explore and contribute ! https://github.com/4urcloud/Kexa Kexa also have a public website if you need more information : https://www.kexa.io We also are building a SAAS web application for premium user that will allow easy rules building with no-code interface and all the features you need to get Kexa up and running without delving too deeply into the source code. If you have any questions, feedback, or would like to collaborate, please don't hesitate to reach us out.