THE PRACTICAL SIDE

Less remembering.
More doing.

Security tools and small scripts I reach for while building.
Working references, ready for the next time.

01 / THE TOOLBOX

Security tools

Working commands for Betterleaks, Checkov, Cloudsplaining, Cloudsploit, and Prowler.

Open the collection 02 / THE TOOLBOX

Compliance scripts

Python and Apps Script helpers to extract, enrich, and convert compliance data.

Open the collection

Jump straight to a tool

BetterleaksCLI command to run Betterleaks secret scanning over a directory and emit a SARIF report. CheckovCLI commands to run Checkov IaC scanning over a directory, all frameworks or default, with JSON output. CloudsplainingPer-cloud setup and scan commands for Cloudsplaining IAM analysis across AWS, Azure, GCP, and OCI. CloudsploitCLI command to run Cloudsploit against a config file and emit JSON results. ProwlerPer-cloud Prowler identity-access scan commands (AWS, Azure, GCP, OCI) with OCSF JSON output.