Ross ROSS = Recommend OSS · open-source software intelligence for agents

Netflix/security_monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time. observed · 2026-08-28

github.com/Netflix/security_monkey · Python · Apache-2.0 (permissive) · archived observed · 2026-08-28

Health v2 · maintenance only

10/100

  • Activity 0
  • Release rhythm 8
  • Longevity 100

Flags: archived

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 4450
  • days_rel: n/a
  • days_push: 2030
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

4371 stars · 780 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Security Monkey is a self-hosted service from Netflix that monitors AWS, GCP, OpenStack, and GitHub organizations for assets and policy changes, alerting on insecure configurations. It provides a web UI to browse accounts and track what changed and when over time.

Use cases

  • monitor my AWS account for insecure configurations
  • track policy changes across cloud accounts over time
  • alert when S3 buckets or IAM policies become insecure
  • watch GitHub orgs and repositories for changes
  • audit cloud infrastructure changes with a single UI

When to choose

  • you are already running it and need reference material
  • you need a historical record of cloud asset changes on legacy Python 2.7 infrastructure

When to avoid

  • starting a new project - it is end-of-life and in maintenance mode
  • AWS-only monitoring - use AWS Config instead
  • GCP-only monitoring - use Cloud Asset Inventory instead
  • you need Python 3 or active community support

Facets

service · maturity abandoned

monitoring alerting security cloud security cloud-computing monitoring python self-hosted aws-security cloud-asset-monitoring policy-change-tracking gcp openstack github-monitoring end-of-life devops linux macos web-server

2 sources

Member repositories

RepositoryRoleHealth v2
Netflix/security_monkeymain10

For agents

markdown · JSON · MCP: product_card(name="Netflix/security_monkey")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem