openshield-org

openshield-org/openshield

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

55 stars 68 forks 55 watchers Python MIT License

azure-devops azure-security cloud-security compliance cspm devsecops-pipeline misconfiguration open-source owasp post-quantum-cryptography python security-scanner security-tools

22 Open Issues Need Help Last updated: Aug 13, 2026

Open Issues Need Help

View All on GitHub

feat(scanner): add AZ-XXX-000/AZ-XXX-000 Trusted Launch and Managed Identity rules about 3 hours ago

good first issue new-rule priority: medium

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

feat: add VM Scale Set inventory, collectors, and first rule about 3 hours ago

enhancement help wanted priority: medium

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[TESTING] Make Flask app import test-safe and run full pytest in CI 2 months ago

enhancement help wanted

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-STOR-006: Storage Account Blob Soft Delete Disabled 2 months ago

help wanted new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[TESTING] Add MockAzureClient rule regression test harness 2 months ago

enhancement help wanted

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[SECURITY] Fail closed when JWT_SECRET is missing in production 2 months ago

bug help wanted core

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[FEATURE] AI 3 : Natural Language Q&A Over Scan Findings 3 months ago

enhancement help wanted

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[FEATURE] AI 1 : Provider Abstraction Layer (Anthropic, Groq, Gemini) 3 months ago

enhancement good first issue

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

Issue P-4: [DOCS] Add SECURITY.md, feature request template, and README badges 3 months ago

good first issue

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[DOCS] Add SECURITY.md, feature request template, and README badges 3 months ago

documentation good first issue

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-STOR-004: Storage account diagnostic logging disabled 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-DB-003: PostgreSQL Flexible Server SSL enforcement disabled 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-KV-003: Key Vault without diagnostic logging enabled 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-IDN-003: Guest user access enabled without restriction in Entra ID 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[DOCS] Update architecture.md to reflect all 20 current rules 3 months ago

documentation good first issue

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-CMP-002: Virtual machine without disk encryption enabled 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-NET-011: Network Watcher not enabled in all regions 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[DOCS] Add SOC 2 Type II compliance framework mapping 3 months ago

documentation help wanted

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-STOR-003: Storage account without lifecycle management policy 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[DOCS] Add real-world breach scenario for each of the 10 starter rules 3 months ago

documentation good first issue

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[SCANNER] Expand network security rules AZ-NET-003 to AZ-NET-010 3 months ago

help wanted core

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools

[RULE] AZ-KV-002: Key Vault not using private endpoint 3 months ago

good first issue new-rule

openshield-org/openshield

55

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python

#azure-devops#azure-security#cloud-security#compliance#cspm#devsecops-pipeline#misconfiguration#open-source#owasp#post-quantum-cryptography#python#security-scanner#security-tools