# ZeusCloud | Open Source Cloud Security **URL:** \ **Category:** Tools & Scripts\ **Tags:** hacking, freebies\ **Created:** [July 16, 2023, 10:34pm UTC](https://onehack.st/t/zeuscloud-open-source-cloud-security/251781 "2023-07-16T22:34:43Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Astrid](https://onehack.st/user_avatar/onehack.st/astrid/32/174869_2.png) [@Astrid](https://onehack.st/u/Astrid)\ **Post date:** [July 16, 2023, 10:34pm UTC](https://onehack.st/t/zeuscloud-open-source-cloud-security/251781/1 "2023-07-16T22:34:43Z")
![logo](https://user-images.githubusercontent.com/20483346/222834439-0cbf26d7-eaa6-462c-9438-e3a91a02c7d2.png) _Secure your cloud._ * * * [![Prs Welcome](https://camo.githubusercontent.com/8fb9b26ca180fa31b36c31e49da84cbd3b771f4240c91d3df91bb6ed352efd8f/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5052732d77656c636f6d652d627269676874677265656e2e7376673f7374796c653d736869656c6473)](http://makeapullrequest.com/) [![Join Slack](https://camo.githubusercontent.com/8db0909928645db7f3240bb5d6152eccdf80dd064717a1b5697149ae4af9414b/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f736c61636b253230636f6d6d756e6974792d6a6f696e2d626c7565)](https://join.slack.com/t/ironleapcommunity/shared_invite/zt-1oxm8asmq-4oyM4fdqarSHMoMstGH6Lw) [![License](https://camo.githubusercontent.com/a644a3a88e0c410d0c763a1059fe98185ed9d5068d9b9e523227150ef7d8b202/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d417061636865322e302d627269676874677265656e)](https://github.com/Zeus-Labs/ZeusCloud/blob/main/LICENSE) * * * ## ZeusCloud is an open source cloud security platform. Discover, prioritize, and remediate your risks in the cloud. - Build an asset inventory of your AWS accounts. - Discover attack paths based on public exposure, IAM, vulnerabilities, and more. - Prioritize findings with graphical context. - Remediate findings with step by step instructions. - Customize security and compliance controls to fit your needs. - Meet compliance standards PCI DSS, CIS, SOC 2, and more! ## Table of Contents - [Quick Start](https://github.com/Zeus-Labs/ZeusCloud#quick-start) - [Sandbox](https://github.com/Zeus-Labs/ZeusCloud#sandbox) - [Features](https://github.com/Zeus-Labs/ZeusCloud#features) - [Why ZeusCloud?](https://github.com/Zeus-Labs/ZeusCloud#why-zeuscloud) - [Future Roadmap](https://github.com/Zeus-Labs/ZeusCloud#future-roadmap) - [Contributing](https://github.com/Zeus-Labs/ZeusCloud#contributing) - [Development](https://github.com/Zeus-Labs/ZeusCloud#development) - [Security](https://github.com/Zeus-Labs/ZeusCloud#security) - [Open source vs. paid](https://github.com/Zeus-Labs/ZeusCloud#open-source-vs-paid) ## Quick Start 1. Clone repo: `git clone --recurse-submodules git@github.com:Zeus-Labs/ZeusCloud.git` 2. Run: `cd ZeusCloud && make quick-deploy` 3. Visit [http://localhost:80](http://localhost/) Check out our [Get Started](https://docs.zeuscloud.io/introduction/get-started) guide for more details. A cloud-hosted version is available on special request - email [founders@zeuscloud.io](mailto:founders@zeuscloud.io) to get access! ## Sandbox Play around with [our sandbox environment](https://demo.zeuscloud.io/) to see how ZeusCloud identifies, prioritizes, and remediates risks in the cloud! ## Features [![ZeusCloud](https://user-images.githubusercontent.com/20483346/233917373-fbaf6651-c446-4e3a-b23d-9eb1133e49ac.gif)](https://user-images.githubusercontent.com/20483346/233917373-fbaf6651-c446-4e3a-b23d-9eb1133e49ac.gif) - **Discover Attack Paths** - Discover toxic risk combinations an attacker can use to penetrate your environment. - **Graphical Context** - Understand context behind security findings with graphical visualizations. - **Access Explorer** - Visualize who has access to what with an IAM visualization engine. - **Identify Misconfigurations** - Discover the highest risk-of-exploit misconfigurations in your environments. - **Configurability** - Configure which security rules are active, which alerts should be muted, and more. - **Security as Code** - Modify rules or write your own with our extensible security as code approach. - **Remediation** - Follow step by step guides to remediate security findings. - **Compliance** - Ensure your cloud posture is compliant with PCI DSS, CIS benchmarks and more! ## Why ZeusCloud? Cloud usage continues to grow. Companies are shifting more of their workloads from on-prem to the cloud and both adding and expanding new and existing workloads in the cloud. Cloud providers keep increasing their offerings and their complexity. Companies are having trouble keeping track of their security risks as their cloud environment scales and grows more complex. Several high profile attacks have occurred in recent times. Capital One had an S3 bucket breached, Amazon had an unprotected Prime Video server breached, Microsoft had an Azure DevOps server breached, Puma was the victim of ransomware, etc. We had to take action. - We noticed traditional cloud security tools are opaque, confusing, time consuming to set up, and expensive as you scale your cloud environment - Cybersecurity vendors don’t provide much actionable information to security, engineering, and devops teams by inundating them with non-contextual alerts - ZeusCloud is easy to set up, transparent, and configurable, so you can prioritize the most important risks - Best of all, you can use **ZeusCloud for free**! ## Future Roadmap - Integrations with vulnerability scanners - Integrations with secret scanners - Shift-left: Remediate risks earlier in the SDLC with context from your deployments - Support for Azure and GCP environments ## Contributing We love contributions of all sizes. What would be most helpful first: - Please give us feedback in our [Slack](https://join.slack.com/t/ironleapcommunity/shared_invite/zt-1oxm8asmq-4oyM4fdqarSHMoMstGH6Lw). - Open a PR (see our instructions below on developing ZeusCloud locally) - Submit a feature request or bug report through Github Issues. ## Development Run containers in development mode: ```auto cd frontend && yarn && cd - docker-compose down && docker-compose -f docker-compose.dev.yaml --env-file .env.dev up --build ``` Reset neo4j and/or postgres data with the following: ```auto rm -rf .compose/neo4j rm -rf .compose/postgres ``` To develop on frontend, make the the code changes and save. To develop on backend, run ```auto docker-compose -f docker-compose.dev.yaml --env-file .env.dev up --no-deps --build backend ``` To access the UI, go to: [http://localhost:80](http://localhost/). ## Security Please do not run ZeusCloud exposed to the public internet. Use the latest versions of ZeusCloud to get all security related patches. Report any security vulnerabilities to [founders@zeuscloud.io](mailto:founders@zeuscloud.io). ## Open-source vs. cloud-hosted This repo is freely available under the [Apache 2.0 license](https://github.com/Zeus-Labs/ZeusCloud/blob/main/LICENSE). We’re working on a cloud-hosted solution which handles deployment and infra management. Contact us at [founders@zeuscloud.io](mailto:founders@zeuscloud.io) for more information! Special thanks to the amazing [Cartography](https://github.com/lyft/cartography) project, which ZeusCloud uses for its asset inventory. Credit to PostHog and Airbyte for inspiration around public-facing materials - like this README! ## GitHub: [https://github.com/Zeus-Labs/ZeusCloud](https://github.com/Zeus-Labs/ZeusCloud)