aquasecurity/cloudsploit

Health v2 · maintenance only

Adoption not part of the score

3768 stars · 750 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

CloudSploit by Aqua is an open-source Cloud Security Posture Management (CSPM) tool that scans cloud infrastructure accounts for misconfigurations and security risks. It supports AWS, Azure, GCP, Oracle Cloud Infrastructure, Alibaba Cloud, and GitHub, with compliance mapping for HIPAA, PCI, and CIS Benchmarks.

Use cases

• audit my AWS account for security misconfigurations
• check Azure subscription against CIS benchmarks
• run PCI compliance scans on cloud infrastructure
• detect security risks in GCP projects
• scan multiple cloud accounts for posture issues
• generate compliance reports in CSV or JSON
• self-host a CSPM scanner for cloud accounts

When to choose

• you need open-source, self-hosted cloud security posture scanning
• you want compliance mapping to HIPAA, PCI, or CIS benchmarks across multiple clouds
• you prefer a lightweight Node.js CLI or Docker-based scanner over a commercial CSPM platform

When to avoid

• you need real-time runtime threat detection or container workload scanning
• you require a fully managed SaaS CSPM with dashboards and alerting
• you need scanning for on-premises or non-cloud infrastructure

Facets

cli-tool · maturity active

security vulnerability-scanning monitoring cli developer-tools security cloud-computing infrastructure-as-code legal cli cross-platform cspm cloud-security security-audit aws azure gcp oracle-cloud alibaba-cloud compliance cis-benchmarks hipaa pci misconfiguration-detection devops nodejs docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="aquasecurity/cloudsploit")