security-as-code

An open source, cloud-native security to protect everything from build to runtime

open source, cloud-native, graph-based query language

A modern, extensible framework for defining and enforcing security policies across your digital infrastructure.

OSCAL tools for AI agents

Deepfence Runtime API & code samples

Hardened Windows Server image

Security Scanning Samples with cnspec, cnquery, and Mondoo Platform

A security-as-code tool for making a difference in cybersecurity

DeepLint is a Security-as-Code framework for securing and optimizing cloud environments.

Ansible Role for Mondoo cnquery and cnspec

Production-grade Terraform module that provisions a Docker Swarm cluster on AWS — secure bootstrap via SSM (no SSH provisioners), remote state with S3/DynamoDB, dev/staging/prod environments, and a full CI pipeline (checkov, tflint, gitleaks).

Security skill collection for Claude Code and Codex — SAST, DAST, binary analysis, architecture review, code clustering, and assessment-as-code workflows

Security policy as code for any API gateway. One policy per route (an OpenAPI extension), compiled by a deterministic CLI to Kong, Coraza, BunkerWeb, Cloudflare & more. Versions in git, drift fails CI. Apache-2.0.

Ansible collection to audit and remediate systems against the CIS Benchmarks

Cloud - K8s Security & Compliance Automation Jobs

Operate Elastic Security as code with a safety-first CLI for security engineers.

A comprehensive DevSecOps platform demonstrating Security-as-Code with a hardened CI/CD pipeline, automated security gates (SAST, SCA, Secrets), and blue-green deployments.

Version threat models, hardening baselines, detection rules, secure defaults, and security-review checks as testable artifacts.

Scan codebases for security flaws with LLM agent skills that turn Claude Code, Cursor, and other assistants into SAST scanners

An AI powered IAM agent that uses GitHub Copilot CLI to generate, validate (via Boto3), and report on least privilege AWS policies.