πŸ”§ Tools in Configuration Assessment

Wiz

The Cloud Security Platform.

An agentless cloud security platform that provides full-stack visibility and identifies critical risks in the cloud.

For more tool information ➜

Orca Security

Agentless-First Cloud Security. That Just Works.

An agentless CNAPP that provides full-stack visibility into cloud risks without the overhead of agents.

For more tool information ➜

CrowdStrike Falcon Horizon

Cloud Security Posture Management

A CSPM solution that detects and prevents cloud misconfigurations, control plane threats, and ensures compliance.

For more tool information ➜

JupiterOne

The Cyber Asset Attack Surface Management (CAASM) Platform

A platform that creates a graph-based model of all cyber assets to manage attack surfaces and compliance.

For more tool information ➜

Red Hat Ansible Automation Platform

A flexible, scalable, and comprehensive enterprise automation platform.

An enterprise automation platform that can be used for configuration management, application deployment, and security automation.

For more tool information ➜

Tenable.sc

On-Prem Vulnerability Management. Redefined.

On-premises vulnerability management platform for comprehensive visibility and measurement of cyber risk.

For more tool information ➜

Rapid7 InsightVM

Clarity and Action to Reduce Risk

A vulnerability risk management solution that provides visibility, prioritized risk scoring, and remediation workflows.

For more tool information ➜

Palo Alto Networks Prisma Cloud

The industry’s most complete cloud-native application protection platform.

A comprehensive CNAPP that provides security and compliance coverage from code to cloud.

For more tool information ➜

Qualys VMDR

Vulnerability Management, Detection and Response

A cloud-based app that provides a unified solution for asset discovery, vulnerability assessment, and remediation.

For more tool information ➜

Check Point CloudGuard

Comprehensive Prevention-First Cloud Security

A unified cloud native security platform for automated posture management, threat prevention, and workload protection.

For more tool information ➜

Progress Chef

Automate. Innovate. Accelerate.

An automation platform for building, deploying, and managing infrastructure and applications, with a strong focus on compliance.

For more tool information ➜

Microsoft Defender for Cloud

Protect multicloud and hybrid environments with integrated security from code to cloud.

A unified cloud-native application protection platform (CNAPP) for Azure, AWS, and Google Cloud.

For more tool information ➜

Puppet Enterprise

The standard for infrastructure automation and delivery.

An infrastructure automation tool for configuration management, compliance enforcement, and continuous delivery.

For more tool information ➜

CIS-CAT Pro Assessor

Automated Configuration Assessment Tool

The official tool from the Center for Internet Security (CIS) for assessing system configurations against CIS Benchmarks.

For more tool information ➜

OpenSCAP

NIST Certified SCAP 1.2 Toolkit

An open-source framework for implementing and enforcing the Security Content Automation Protocol (SCAP).

For more tool information ➜