posture-management

NIS2 Continuous Posture Management and Remediation Platform

Open-source security scanner and configuration auditor for Vercel. 130+ checks across 20 categories. Finds leaked tokens, WAF gaps, NEXT_PUBLIC_ secret leaks, subdomain takeover risks, Next.js CVEs, and more. Single binary, zero dependencies.

Cloudflare security assessment — CLI and local dashboard

Multicloud security posture assessments for AWS, Azure, GCP, and Oracle Cloud (OCI) using Prowler on AWS CodeBuild. CloudFormation templates that deploy Prowler on AWS CodeBuild to run point-in-time CSPM scans

MacOS menu bar app that detects slouching using AirPods head-tracking and reminds you to sit up straight.

All the features and services realized by the Posture & Prevention bounded context relative to the application domain, including specification library (e.g api), components implementation (e.g software implementation packages) and deployable systems (e.g operable component on infrastructure types).

Multi-SaaS OAuth grant posture scanner (Google Workspace + GitHub + Slack) with vendored IOC matching, ConnectRPC API, and ko-built static images

Local-first security posture scanner for OpenClaw agents. 69 rules. Zero telemetry.

Certify your citadel. Passive, authorized external security-posture assessment that grades TLS, HTTP headers, cookies, DNS and email auth across a company's assets and issues a leveled certificate + badge. Zero dependencies. Never exploits, only inspects what you authorize.

PosturePal is an open-source wearable device that uses sensor-based monitoring to detect poor posture and deliver real-time feedback. When unhealthy posture is sustained, the device alerts the user to encourage correction. A companion app provides customization options, data tracking, and control over device behavior.

Security control plane for OpenClaw deployments (posture, remediation, monitoring, audit trail).

Zero-dependency, single-binary continuous cloud & TLS posture watchdog for your own infrastructure — diffs each run against the last.

Reference implementation: read-only AWS posture checks with deterministic output

Open-source SSPM for SIEM-native teams: detect SaaS posture risks, inventory OAuth shadow IT, and stream normalized findings to your security stack.

Penetration testing for identity policies — dynamically simulate Okta authentication policies under risky conditions, detect misconfigurations, and score security posture with actionable remediation guidance

Akamai API Security — independent third-party profile of a public API surface, by API Evangelist. Akamai API Security (formerly Noname Security) provides comprehensive API discovery, posture management, and threat protection for organizations across cloud, on-premises, and hybrid environments.

Noname Security — independent third-party profile of a public API surface, by API Evangelist. Noname Security (acquired by Akamai in 2024) is an API security platform that provides complete API discovery, posture management, runtime protection, and active testing capabilities.

CloudGuard — independent third-party profile of a public API surface, by API Evangelist. Check Point CloudGuard is a Cloud Native Application Protection Platform (CNAPP) that delivers cloud security posture management (CSPM), cloud workload protection (CWPP), code security, network security, and intelligence/CDR capabilities across AWS, Azure, GCP,

Valence Security — independent third-party profile of a public API surface, by API Evangelist. Valence Security is the leader in SaaS and AI Security, built for the agentic era. The platform provides SaaS security posture management (SSPM), AI security posture management (AI-SPM), identity threat detection and response (ITDR), and risk remediation