HummerRisk/HummerRisk

Health v2 · maintenance only

Adoption not part of the score

1512 stars · 238 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

HummerRisk is an open-source, agentless cloud-native security platform for hybrid cloud security governance and Kubernetes/container security detection. It provides compliance checks (CIS, MLPS 2.0), cloud resource posture management, image/source/SBOM scanning, and audit reporting across major public and private clouds.

Use cases

• run CIS compliance checks on AWS, Azure, and Alibaba Cloud accounts
• detect misconfigurations and vulnerabilities in Kubernetes clusters
• manage and analyze SBOMs for software supply chain risk
• audit cloud account activity logs across multiple clouds
• scan container images and source code for dependency vulnerabilities
• generate cloud security compliance reports
• get a unified posture view of hybrid cloud resources

When to choose

• you need a self-hosted, agentless CSPM covering many Chinese and international clouds
• you want combined cloud compliance and K8s/container security in one platform
• you need SBOM management and supply chain risk detection

When to avoid

• you only need a lightweight single-purpose scanner like Trivy or Prowler
• you require a SaaS-managed security product
• you need non-Linux deployment or Windows-native tooling

Facets

application · maturity maintenance

security vulnerability-scanning monitoring security cloud-computing self-hosted self-hosted cspm cloud-security kubernetes-security sbom hybrid-cloud compliance agentless multi-cloud java compliance-as-code containers devops linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="HummerRisk/HummerRisk")