Introducing CfnGoat, a vulnerable-by-design CloudFormation training tool
Weâre excited to release CfnGoat đ, a security training project for AWS CloudFormation. In addition…
Introducing the State of Open Source Terraform Security Report
We scanned the Terraform Registry and analyzed the overall state of infrastructure-as-code security and compliance. Read the full report to learn about the security posture of the IaC ecosystem.
Kubernetes static code analysis with Checkov
Use Checkov, Bridgecrew's OSS infrastructure-as-code analysis tool, to scan Kubernetes manifests and identify security issues in Kubernetes workloads.
Introducing TerraGoat, a âvulnerable-by-designâ Terraform training project
Learn how to identify errors in infrastructure-as-code templates with Bridgecrew's new Terraform security training project TerraGoat.
Getting a grip on AWS Identity and Access Management with new open-source tool AirIAM
Announcing our new open-source project AirIAM that uses infrastructure-as-code to automate and right-size AWS Identity and Access Management (IAM).
Announcing CloudFormation Support in Checkov
Checkov, our open-source infrastructure-as-code static analysis tool, now supports CloudFormation in addition to Terraform.
Announcing Checkov: Prevent cloud misconfigurations during build time
Keep your cloud intrastructure secure with Checkov, Bridgecrew's new open-source tool for infrastructure-as-code static analysis.