Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.
In order to run the Databricks and NIFCloud queries, use the --experimental-queries flag when running KICS.
Setting up and using KICS is super-easy.
- First, see how to install and get KICS running.
- Then explore KICS output results format and quickly fix the issues detected.
Interested in more advanced stuff?
See KICS documentation for more details and topics.
What makes KICS really powerful and popular is its built-in extensibility. This extensibility is achieved by:
- Fully customizable and adjustable heuristics rules, called queries. These can be easily edited, extended and added.
- Robust but yet simple architecture, which allows quick addition of support for new Infrastructure as Code solutions.
KICS is a true community project. It's built as an open source from day one, and anyone can find his own way to contribute to the project. Check out how, within just minutes, you can start making a difference, by sharing your expertise with a community of thousands of security experts and software developers.
You're welcome to join our monthly community meetings, talk with us on GitHub discussions or contact KICS core team at [email protected].
- Blackhat ASIA 2023 (video TBD)
- AWS re:Invent 2021: AWS On Air (video)
- OWASP Bristol & Suffolk Chapter - Meetup (video)
- OWASP Canberra Chapter - Meetup
- InfoSec City - Singapore 2021
- DevSecOps Singapore 2021
- Blackhat Europe 2021
- HashiTalks IL 2021 (video)
- Yalla DevOps 2021 (video)
- Geektime Code 2021
- DevSecCon24 2021 (video)
- GISEC Global 2021
- Blackhat ASIA 2021 (video)
Keeping Infrastructure as Code Secure!
© 2023 Checkmarx Ltd. All Rights Reserved.