OWASP

OWASP/openshield

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

56 stars 68 forks 56 watchers Python MIT License
azure-devops azure-security cloud-security compliance cspm devsecops-pipeline misconfiguration open-source owasp post-quantum-cryptography python security-scanner security-tools
View on GitHub
2 Open Issues Need Help Last updated: Sep 8, 2026

Open Issues Need Help

View All on GitHub
feat: add VM Scale Set inventory, collectors, and first rule 8 days ago
enhancement help wanted priority: medium stale
OWASP/openshield
56

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python
#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools
feat(scanner): add AZ-XXX-000/AZ-XXX-000 Trusted Launch and Managed Identity rules 10 days ago
good first issue new-rule priority: medium stale
OWASP/openshield
56

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python
#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools