Open source cspm projects

Every project in the registry tagged cspm, ranked by real GitHub adoption.

projects 5 combined stars ★ 37K refresh nightly
01 prowler ★ 15K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

last push8 hours ago languagePython licenseApache-2.0
02 steampipe ★ 8.0K

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

last push12 hours ago languageGo licenseAGPL-3.0
03 CloudQuery ★ 6.5K

Sync and transform data from any source to any destination

last push17 hours ago languageGo licenseMPL-2.0
04 ThreatMapper ★ 5.3K

Open Source Cloud Native Application Protection Platform (CNAPP)

last push4 months ago languageTypeScript licenseApache-2.0
05 fixinventory ★ 2.1K

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

last push6 months ago languagePython licenseApache-2.0

Related tags

← all tags

Frequently asked questions

How many open source cspm projects are there?

This registry tracks 5 projects tagged cspm, with 36,704 GitHub stars between them. The most-adopted is prowler at 14,830 stars.

Are these cspm projects free to use?

Yes — 5 of the 5 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which cspm project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these cspm projects still maintained?

3 of the 5 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.