Life & fun · alternatives · 2026
24 alternatives to Principal Mapper v1.1.0 – AWS IAM Security Analysis
A tool for quickly evaluating IAM permissions in AWS. - nccgroup/PMapper
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Principal Mapper v1.1.0 – AWS IAM Security Analysis launched in 2021; newer entries below may have overtaken it.
- 1

CloudMapper helps you analyze your Amazon Web Services (AWS) environments. - duo-labs/cloudmapper
2018 · github.com · its alternatives →
- 2

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2017 · github.com · its alternatives →
- 3

- 4Infrabase▲142
We too at first thought that letting an LLM manage your AWS account must be a bad idea. What could possibly go wrong?? However we couldn’t resist building it, and when we did, we were surprised how much it can do even in plain vanilla form, which currently is just the ai-sdk frontend with some aws sdk code generation (inspared by aws-mcp). We all but stopped using the AWS console internally and switched to Infrabase - a lot of the time it’s much faster to prompt than to click around in AWS console, especially for things that involve multiple steps, IAM roles, etc. So we started to think of…
2025 · infrabase.co · its alternatives →
- 5

Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources will have nowhere to hide! - mlabouardy/komiser
2019 · github.com · its alternatives →
- 6
CodeShield▲78Detect and fix IAM privilege escalations in your AWS account
2022 · codeshield.io · its alternatives →
- 7

Permission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW - sighupio/permission-manager
2020 · github.com · its alternatives →
- 8

POC Nathan Accacio. Contribute to iamarkadyt/aws-auth development by creating an account on GitHub.
2021 · github.com · its alternatives →
- 9

IAM Least Privilege Policy Generator. Contribute to salesforce/policy_sentry development by creating an account on GitHub.
2019 · github.com · its alternatives →
- 10

- 11

Hi HN, We’re building security tooling around agentic AI systems. Today, we're releasing our public MCP catalog with detailed risk analysis for every MCP server we've found on the internet: https://mcp.armor1.ai/mcp-directory We all love agents and the power that MCPs unlock: suddenly your AI assistant can query databases, manage files, call APIs, and interact with the real world. But when we started adopting MCPs ourselves, we kept running into the same nagging questions: Is this MCP safe? Where is my data actually going? Could it execute destructive actions? Is it…
Feb 2026 · mcp.armor1.ai · its alternatives →
- 12

Keyless SSH Agent for IAM Principals. Contribute to keithduncan/iam-ssh-agent development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 13AA
Personal knowledge space
2020 · aws.dendron.so · its alternatives →
- 14
IAM Agent▲17Automate AWS IAM role setup with a single click
2025 · skylineopsai.com · its alternatives →
- 15

We’re building an open-source tool that makes it easy to expose secure, LLM-optimized APIs on top of your structured data—without manually designing endpoints or worrying about compliance. AI agents and LLM-powered applications need structured access to data, but traditional APIs and databases weren’t built with AI workloads in mind. Our tool automatically generates APIs that: - Filter out PII & sensitive data to comply with GDPR, CPRA, SOC 2, and other regulations. - Provide traceability & auditing, so AI apps aren’t black boxes, and security teams stay in control. - Optimize for AI…
2025 · github.com · its alternatives →
- 16

Attribute-based access control with a policy UI and policy as code. User, resource, and environment attributes evaluated at decision time.
2022 · permit.io · its alternatives →
- 17

We've been building with AI tools and noticed there wasn't a good way to manage MCP servers across a team or see what's actually flowing to LLM providers. Who's running what? Which tools are approved? What data is going where or whats shared on AI websites? So we built CyberCage (). What it does: MCP Management — Auto or manual discovery of MCP servers, with approval workflows. Manage allowed MCP servers org-wide (down to individual tools). Secure MCP catalog (integrates with GitHub's MCP Catalog). Operations — Manage allowed AI applications org-wide. Full audit logs (Splunk integration…
Dec 2025 · cybercage.io · its alternatives →
- 18

Open source RBAC library. Associate users with roles and permissions. - Permify/go-role
2022 · github.com · its alternatives →
- 19

This Tool will be used to find the conflicting policies for a user. - ankitsaini2609/PViewer
2020 · github.com · its alternatives →
- 20

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report. - salesforce/cloudsplaining
2020 · github.com · its alternatives →
- 21
- 22DT
We are super excited to release the community edition of our product to help DevSecOps teams -- Deepfence ThreatMapper ! Deepfence is a unified platform to protect kubernetes, virtual machines and serverless workloads at runtime. We have packaged a subset of important features of the platform in this edition. Essentially, you can visualize kubernetes clusters, virtual machines and container images in real time and scan them for vulnerabilities. You can also scan an unlimited number of container images by integrating with popular registries. This community edition comes with batteries…
2020 · its alternatives →
- 23

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2016 · github.com · its alternatives →
- 24

Cloud Native Workload Protection Platform
2020 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →