ZeusCloud (YC W22) – open-source cloud security
Hey folks - last month, we open sourced ZeusCloud (https://github.com/Zeus-Labs/ZeusCloud) - a platform to identify, prioritize, and remediate security risks in your cloud environment. ZeusCloud thinks like an attacker. It identifies security risks in your environment like infra misconfigurations, over-permissive identities, and workload vulnerabilities. And it pieces them together to show you attack paths like a publicly exposed VM with a critical CVE has effective admin access. Some highlights of the ZeusCloud platform: - Graphical attack paths so you can prioritize the…
In plain words
ZeusCloud is an open-source platform that identifies, prioritizes, and remediates security risks in cloud environments. It detects infrastructure misconfigurations, excessive permissions, and workload vulnerabilities, then maps them into attack paths to show how threats could chain together. The platform provides graphical visualizations of risks, inventories cloud assets across compute, networking, and IAM, and includes an access explorer to analyze how users and roles can reach sensitive resources. It is designed for teams managing AWS security.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hey folks - last month, we open sourced ZeusCloud (https://github.com/Zeus-Labs/ZeusCloud) - a platform to identify, prioritize, and remediate security risks in your cloud environment. ZeusCloud thinks like an attacker. It identifies security risks in your environment like infra misconfigurations, over-permissive identities, and workload vulnerabilities. And it pieces them together to show you attack paths like a publicly exposed VM with a critical CVE has effective admin access. Some highlights of the ZeusCloud platform: - Graphical attack paths so you can prioritize the risks in your cloud with context - An asset inventory of your compute, networking, and IAM assets to give you further visibility into your AWS environments - An interactive access explorer view that shows you how IAM users/roles can access S3 buckets, EC2 instances, etc. for blast radius analysis We know other cloud security products exist. But, in our experience, they’re often inaccessible or fail to show you sufficient context behind security findings. The project is still early - we’ve focused so far on infra misconfiguration and identity risks. Looking to add vulnerabilities to the attack paths through tools like Project Discovery (nuclei) and Burpsuite next. Check out our GitHub (Licensed Apache 2.0): https://github.com/Zeus-Labs/ZeusCloud Play around with our Sandbox environment: https://demo.zeuscloud.io Get Started (free/self-hosted): https://docs.zeuscloud.io/introduction/get-started Would love to hear what you think!
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, May 2023
the whole month →
- BR
In today's world, catchy headlines and articles often distract readers from the facts and relevant information. By utilizing OpenAI's language models, Boring Report processes sensationalist news articles, transforms them into the content you see, and helps readers focus on the essential details. We recently updated our iOS app experience, so any and all feedback would be appreciated. App Link: https://apps.apple.com/us/app/boring-report-news-by-ai/id644...
AI · 2023 · boringreport.org
Momentum Page▲834Launch your website in seconds, get users in minutes
Dev tools · 2023 · page.mmntm.build