Skip to content
PR

Open source: OWASP OpenShield

(Open source)

OWASP OpenShield

Open-source Azure Cloud Security Posture Management, built in the open under the OWASP Foundation.

Official maintainer · write & merge accessOWASP Incubator ProjectOpenSSF Best Practices passing badge
Animated diagram: a scan sweeps a grid of Azure resources, flags misconfigured ones, maps each finding to compliance controls, and remediates it from the CLI.

Why it exists

Commercial cloud-security posture tools can be unaffordable for startups, SMEs, universities, and student teams, leaving them with limited visibility into Azure misconfiguration.

My role

  • Official maintainer: review and merge pull requests, triage and prioritise issues, and track roadmap milestones
  • CODEOWNER for the test suite and documentation, reviewing every change to them
  • Built the OpenShield Learn contributor portal
  • Azure detection rules, compliance mappings and CLI remediation guidance
  • Alembic migrations, validated in CI against a clean PostgreSQL database

OpenShield is an official OWASP Incubator Project, developed in the open under the OWASP Foundation with a maintainer-led governance model.

How it works

From a raw subscription to a fix you can apply.

  1. L1

    Azure topology scan

    Subscription resources are enumerated and inspected.

  2. L2

    Detection rules

    Rules flag Azure misconfigurations and quantum-unsafe cryptography.

  3. L3

    Compliance mapping

    Findings map to compliance controls.

  4. L4

    CLI remediation

    Each mapping carries matching remediation guidance.

  5. L5

    Tests, docs, migrations

    Alembic migrations and clean-PostgreSQL CI keep the database reliable.

Built with

  • Python
  • Azure SDK
  • Flask
  • PostgreSQL
  • Alembic
  • React
  • GitHub Actions
  • CodeQL
Repository
OWASP project page
Learn
Dashboard