ZeusCloud

Hey folks - last month, we open sourced ZeusCloud (https://github.com/Zeus-Labs/ZeusCloud) - a platform to identify, prioritize, and remediate security risks in your cloud environment. ZeusCloud thinks like an attacker. It identifies security risks in your environment like infra misconfigurations, over-permissive identities, and workload vulnerabilities. And it pieces them together to show you attack paths like a publicly exposed VM with a critical CVE has effective admin access. Some highlights of the ZeusCloud platform: - Graphical attack paths so you can prioritize the risks in your cloud with context - An asset inventory of your compute, networking, and IAM assets to give you further visibility into your AWS environments - An interactive access explorer view that shows you how IAM users/roles can access S3 buckets, EC2 instances, etc

Hey folks - sharing something we're in the early innings of developing. Hoping to get some feedback from the community! ZeusCloud is an open-source cloud security platform that thinks like an attacker! We’re hoping to give teams the one stop shop for their core preventative cloud security needs (cloud misconfigurations, identity, workload vulnerability scanning, etc.). ZeusCloud works by: - Identifying risks across your cloud environments (e.g. misconfigurations, identity weakness, vulnerabilities, etc.) - Prioritizing those risks based on toxic risk combinations an attacker may exploit. - Remediating by giving step by step instructions on how to fix the risk findings. - Monitoring compliance - track your PCI DSS, SOC 2, GDPR, CIS goals. We know there are many cloud security tools out there, but in our experience they are limited in scope