An API key is a unique identifier that is used to authenticate requests associated with your project. Some developers might hardcode them or leave it on public shares.

In 13 listsDetails

gVisor is a user-space kernel, written in Go, that implements a substantial portion of the Linux system surface. It includes an Open Container Initiative (OCI) runtime called runsc that provides an isolation boundary between the application and the host kernel. The runsc runtime integrates with…

In 7 listsDetails

Falco

CNCF graduated runtime security standard originally created by Sysdig, monitoring syscalls and Kubernetes audit events in real time using eBPF to detect suspicious behaviors like shells spawned inside containers, privileged container creation, and unexpected outbound connections.

In 7 listsDetails

Cynative

🟢 — Local AI security research agent for cloud, code, and runtime environments across GitHub, GitLab, AWS, GCP, Azure, and Kubernetes, with read-only action gates, sandboxed code execution, evidence-backed verification, and audit logs. · updated 2026-10-11); Related: Fraim · EscalateGPT

In 6 listsDetails

gitleaks

Zachary Rice - Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repositories.

In 5 listsDetails

Kata Containers

Secure container runtime with lightweight virtual machines that feel and perform like containers, but provide stronger workload isolation using hardware virtualization technology as a second layer of defense.

In 5 listsDetails

Pacu

Open-source AWS exploitation framework designed for offensive security testing, allowing penetration testers to exploit configuration flaws within AWS accounts using modular attack modules including privilege escalation, IAM backdooring, and Lambda attacks.

In 5 listsDetails

S3Scanner

Cloud storage scanner for identifying exposed S3 buckets containing IoT firmware or configuration data.

In 4 listsDetails

ScoutSuite

Found in these lists

Often listed next to it