Meta tags:
description=Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command - openshield-org/openshield;

Headings (most frequently used words):

openshield, uh, oh, navigation, code, saved, searches, files, security, contributing, license, footer, search, repositories, users, issues, pull, requests, provide, feedback, org, menu, use, to, filter, your, results, more, quickly, folders, and, latest, commit, history, repository, the, problem, why, post, quantum, cryptography, matters, now, what, does, assurance, architecture, live, demo, tech, stack, project, structure, quick, start, roadmap, learn, api, reference, changelog, about, releases, packages, contributors, languages, topics, resources, of, conduct, policy, stars, watchers, forks,

Text of the page (most frequently used words):
and (42), #security (35), #openshield (30), azure (23), api (21), the (19), github (18), code (15), for (15), compliance (13), your (13), website (12), rules (12), project (12), scanner (11), vercel (11), scan (10), with (10), all (10), sentinel (10), quantum (9), open (9), findings (9), documentation (9), app (9), free (9), dashboard (9), json (9), this (8), docs (8), python (8), reload (8), contributing (8), cloud (8), nist (8), live (8), remediation (8), support (8), render (8), playbooks (8), view (8), source (7), postgresql (7), enterprise (7), you (6), navigation (6), loading (6), license (6), post (6), cryptography (6), cis (6), https (6), actions (6), cli (6), react (6), flask (6), engine (6), database (6), export (6), openssf (6), there (5), was (5), error (5), while (5), please (5), page (5), readme (5), cspm (5), fix (5), one (5), see (5), full (5), changelog (5), available (5), blog (5), are (5), use (5), sdk (5), roadmap (5), rule (5), frontend (5), dev (5), alembic (5), rest (5), governance (5), practices (5), quality (5), search (5), community (4), policy (4), misconfiguration (4), map (4), them (4), history (4), gallery (4), data (4), endpoints (4), iso (4), 27001 (4), integration (4), soc (4), mapping (4), add (4), write (4), framework (4), from (4), default (4), run (4), org (4), requirements (4), secret (4), terraform (4), scripts (4), microsoft (4), scans (4), assurance (4), best (4), files (4), package (4), issues (4), can (3), that (3), 2026 (3), release (3), stars (3), conduct (3), mit (3), resources (3), devops (3), tools (3), topics (3), misconfigurations (3), iso27001 (3), soc2 (3), command (3), reference (3), playground (3), learn (3), workflows (3), mappings (3), schema (3), npm (3), install (3), com (3), backend (3), changes (3), production (3), txt (3), start (3), import (3), set (3), frameworks (3), kql (3), deployed (3), startup (3), passing (3), into (3), posture (3), key (3), fips (3), migration (3), using (3), services (3), now (3), more (3), commit (3), name (3), insights (3), pull (3), requests (3), signed (3), settings (3), another (3), tab (3), window (3), refresh (3), session (3), sign (3), saved (3), feedback (3), grade (3), features (3), copilot (3), platform (3), solutions (3), explore (3), time (2), manage (2), status (2), footer (2), html (2), contributors (2), latest (2), releases (2), repository (2), forks (2), custom (2), devsecops (2), pipeline (2), unsafe (2), interactive (2), contributor (2), onboarding (2), architecture (2), students (2), end (2), real (2), csf (2), playbook (2), first (2), external (2), alert (2), pqc (2), core (2), new (2), contribute (2), developers (2), required (2), public (2), demo (2), require (2), onrender (2), local (2), localhost (2), git (2), clone (2), azure_subscription_id (2), subscription (2), client (2), jwt_secret (2), strong (2), upgrade (2), print (2), result (2), scanengine (2), create (2), trigger (2), repo (2), arm (2), reserved (2), future (2), fixes (2), tailwind (2), cost (2), layer (2), development (2), runs (2), secrets (2), service (2), n51 (2), via (2), graph (2), read (2), score (2), evidence (2), case (2), maintainer (2), record (2), through (2), level (2), criteria (2), across (2), change (2), analytics (2), drift (2), every (2), storage (2), vault (2), dsa (2), classical (2), algorithms (2), rsa (2), cryptographic (2), assets (2), before (2), decrypt (2), why (2), startups (2), teams (2), 000 (2), yaml (2), pyproject (2), toml (2), lock (2), docker (2), compose (2), yml (2), ini (2), security_acknowledgements (2), maintainers (2), dockerfile (2), gitignore (2), env (2), example (2), dockerignore (2), tests (2), infra (2), 174 (2), commits (2), last (2), message (2), menu (2), projects (2), discussions (2), appearance (2), cancel (2), searches (2), repositories (2), business (2), advanced (2), developer (2), customer (2), merge (2), perform, action, not, share, personal, information, cookies, contact, privacy, terms, inc, other, css, hcl, shell, javascript, languages, packages, jul, report, watching, watchers, properties, activity, owasp, about, learning, portal, openshieldlearn, netlify, fundamentals, covers, built, engineers, who, believe, tooling, should, accessible, everyone, modify, distribute, multi, aws, gcp, wiring, serving, library, merged, world, breach, scenarios, documented, benchmark, 001, 003, scaffolding, credited, below, guide, including, how, under, minutes, improve, bug, ways, actively, welcome, contributions, levels, token, mode, jwt, always, vite_api_url, develop, against, points, http, 5000, step, existing, databases, migrations, pip, azure_client_id, azure_client_secret, azure_tenant_id, tenant, database_url, 5432, head, flask_app, dumps, indent, environ, run_scan, update, used, protect, credentials, dependencies, quick, individual, here, scanning, orchestration, azure_client, wrapper, templates, routes, models, checks, structure, day, trial, siem, managed, vite, static, cdn, technology, tech, stack, rely, automatic, enable, enforcement, without, these, signals, allowed, warning, true, openshield_env, token_urlsafe, deployments, missing, insecure, shorter, than, characters, generate, fail, requirement, important, hosted, connects, automatically, load, shows, note, gules, url, flowchart, nvercel, njwt, cors, blueprints, nscanned, ncis, nfindings, ingest, nnormalise, hmac, upload, nopenshieldfindings_cl, calls, output, manual, collector, alerts, silver, register, accessibility, i18n, july, june, 2027, responsibilities, policies, verified, publicly, verifiable, official, continues, strengthen, its, engineering, progresses, higher, has, achieved, completing, 100, applicable, control, reporting, analysis, badge, normalises, pushes, log, table, site, monitoring, prioritization, views, ships, matching, script, stores, exposes, resource, inventory, over, maps, benchmarks, mapper, network, identity, compute, aks, description, feature, what, does, 203, kem, 204, 205, slh, feed, directly, planning, certificates, signature, keys, ecc, vulnerable, shor, algorithm, tls, configurations, ecdh, exchange, need, too, late, adversaries, collecting, encrypted, traffic, today, when, computers, become, called, harvest, later, attack, happening, right, matters, smes, universities, student, left, their, misconfigured, blob, overprivileged, principal, nsg, sit, undetected, months, zero, visibility, like, 500, year, defender, prisma, wiz, problem, management, detect, identify, requiring, safe, items, date, folders, file, tags, branches, additional, options, star, fork, must, notification, notifications, dismiss, switched, accounts, out, resetting, focus, qualifiers, our, query, filter, results, quickly, submit, include, email, address, contacted, piece, take, input, very, seriously, provide, syntax, tips, clear, users, jump, pricing, premium, ons, powered, collections, trending, archive, program, accelerator, lab, programs, fund, sponsors, partners, trust, center, forum, skills, ebooks, reports, events, webinars, stories, type, software, topic, industries, government, manufacturing, financial, healthcare, industry, cases, modernization, nonprofits, small, medium, enterprises, company, size, marketplace, stop, leaks, they, protection, secure, build, find, vulnerabilities, application, enforce, review, plan, track, work, instant, environments, codespaces, automate, any, workflow, integrate, mcp, registry, direct, agents, issue, better, creation, toggle, skip, content,

Text of the page (random words):
github openshield org openshield open source cspm for azure scan for misconfigurations and quantum unsafe cryptography map findings to cis nist iso27001 soc2 and fix them with one command github skip to content navigation menu toggle navigation sign in appearance settings platform ai code creation github copilot write better code with ai github copilot app direct agents from issue to merge mcp registry new integrate external tools developer workflows actions automate any workflow codespaces instant dev environments issues plan and track work code review manage code changes code quality enforce quality at merge application security github advanced security find and fix vulnerabilities code security secure your code as you build secret protection stop leaks before they start explore why github documentation blog changelog marketplace view all features solutions by company size enterprises small and medium teams startups nonprofits by use case app modernization devsecops devops ci cd view all use cases by industry healthcare financial services manufacturing government view all industries view all solutions resources explore by topic ai software development devops security view all topics explore by type customer stories events webinars ebooks reports business insights github skills support services documentation customer support community forum trust center partners view all resources open source community github sponsors fund open source developers programs security lab maintainer community accelerator github stars archive program repositories topics trending collections enterprise enterprise solutions enterprise platform ai powered developer platform available add ons github advanced security enterprise grade security features copilot for business enterprise grade ai features premium support enterprise grade 24 7 support pricing search or jump to search code repositories users issues pull requests search clear search syntax tips provide feedback we read every piece of feedback and take your input very seriously include my email address so i can be contacted cancel submit feedback saved searches use saved searches to filter your results more quickly name query to see all available qualifiers see our documentation cancel create saved search sign in sign up appearance settings resetting focus you signed in with another tab or window reload to refresh your session you signed out in another tab or window reload to refresh your session you switched accounts on another tab or window reload to refresh your session dismiss alert message uh oh there was an error while loading please reload this page openshield org openshield public notifications you must be signed in to change notification settings fork 64 star 54 code issues 10 pull requests 6 discussions actions projects security and quality 0 insights additional navigation options code issues pull requests discussions actions projects security and quality insights openshield org openshield dev branches tags go to file code open more actions menu folders and files name name last commit message last commit date latest commit history 174 commits 174 commits github github ai ai alembic alembic api api compliance frameworks compliance frameworks docs docs frontend frontend infra terraform infra terraform playbooks playbooks scanner scanner scripts scripts sentinel sentinel tests tests website website dockerignore dockerignore env example env example gitignore gitignore changelog md changelog md contributing md contributing md dockerfile dockerfile governance md governance md license license maintainers md maintainers md readme md readme md roadmap md roadmap md security_acknowledgements md security_acknowledgements md support md support md alembic ini alembic ini docker compose yml docker compose yml package lock json package lock json package json package json pyproject toml pyproject toml render yaml render yaml requirements txt requirements txt startup sh startup sh view all files repository files navigation readme code of conduct contributing mit license security more items openshield open source cloud security posture management cspm for azure detect misconfigurations map to cis nist iso27001 soc2 fix them with one command and identify cryptographic assets requiring quantum safe migration the problem enterprise cloud security tools like wiz prisma cloud and microsoft defender for cloud cost 50 000 500 000 year startups smes universities and student teams are left with zero visibility into their azure security posture a misconfigured storage blob an overprivileged service principal or an open nsg rule can sit undetected for months openshield changes that why post quantum cryptography matters now adversaries are collecting encrypted azure traffic today to decrypt it when quantum computers become available this is called a harvest now decrypt later attack and it is happening right now openshield scans azure for classical cryptographic assets that need migration before it is too late tls configurations using rsa or ecdh key exchange on app services key vault keys using rsa or ecc algorithms vulnerable to shor s algorithm certificates using classical signature algorithms findings map to nist fips 203 ml kem fips 204 ml dsa and fips 205 slh dsa and feed directly into post quantum migration planning what openshield does feature description misconfiguration scanner runs 51 azure security rules across storage network identity database compute key vault aks and post quantum cryptography compliance mapper maps findings to cis benchmarks nist csf iso 27001 and soc 2 framework json files scan history api stores scans and findings in postgresql and exposes findings score scan history compliance posture drift and resource inventory over rest remediation playbooks every rule ships with a matching azure cli remediation script 51 playbooks security dashboard full react dashboard deployed on vercel live monitoring findings compliance drift prioritization and ai layer views project website documentation and reference site at openshield website vercel app blog rules gallery docs roadmap releases and interactive playground sentinel integration normalises findings and pushes them into microsoft sentinel via a log analytics custom table and kql analytics rules security assurance openshield has achieved the openssf best practices passing badge completing 100 of the applicable passing level criteria across project governance change control reporting quality security and code analysis openssf best practices passing the project s openssf status is publicly verifiable through the official openssf best practices project record openshield continues to strengthen its engineering security assurance and open source governance practices as it progresses through the higher level criteria view openshield s verified openssf best practices record project policies and assurance evidence governance and maintainer responsibilities july 2026 june 2027 roadmap support and upgrade policy security requirements and security assurance case release security and accessibility i18n policy openssf silver evidence register architecture flowchart td a react dashboard nvercel live b flask rest api njwt cors blueprints c scanner engine n51 python rules d azure subscription nscanned via azure sdk graph e compliance framework json ncis nist iso 27001 soc 2 f postgresql database nfindings scans g azure cli playbooks n51 remediation scripts h sentinel ingest py nnormalise hmac upload i microsoft sentinel nopenshieldfindings_cl kql rules a rest calls b b trigger scans c b read write f b compliance score e c azure sdk graph d c findings f c scan output json h g manual fixes d h data collector api i i alerts a loading live demo service url security dashboard vercel https openshield gules vercel app rest api render https openshield api onrender com project website https openshield website vercel app note the api is hosted on render the dashboard connects automatically on load and shows live data from the postgresql database important security requirement production deployments fail at startup if jwt_secret is missing set to the insecure default or shorter than 32 characters generate a strong secret with python c import secrets print secrets token_urlsafe 32 set openshield_env production or rely on render s automatic render true to enable this enforcement local development runs without these signals are allowed to use the default with a warning tech stack layer technology cost project website static html tailwind cdn deployed on vercel free security dashboard react vite tailwind deployed on vercel free backend api python flask free database postgresql render managed postgresql cloud scanner python azure sdk free remediation azure cli playbooks free siem microsoft sentinel 90 day free trial ci cd github actions free repo github free project structure openshield scanner azure misconfiguration rule engine rules individual scan rules contribute here engine py core scanning orchestration azure_client py azure sdk wrapper compliance framework mapping engine frameworks cis nist iso 27001 soc 2 mappings playbooks remediation playbooks arm reserved for future arm templates terraform reserved for future terraform fixes cli azure cli scripts api flask rest api routes models frontend react security dashboard vercel website project website docs blog rules gallery vercel sentinel sentinel integration kql rules github workflows ci checks docs documentation contributing md readme md quick start backend flask api scanner clone the repo git clone https github com openshield org openshield git cd openshield install python dependencies pip install r requirements txt set your azure credentials export azure_subscription_id your subscription id export azure_client_id your client id export azure_client_secret your client secret export azure_tenant_id your tenant id export jwt_secret your strong secret used to protect write endpoints scan trigger ai export database_url postgresql openshield openshield localhost 5432 openshield create or update the database schema alembic upgrade head run a scan python c from scanner engine import scanengine import json os result scanengine os environ azure_subscription_id run_scan print json dumps result indent 2 start the api flask_app api app py flask run see database migrations for schema changes and the one time onboarding step required for existing production databases frontend react dashboard cd frontend npm install local dev points at http localhost 5000 by default npm run dev to develop against the live render backend vite_api_url https openshield api onrender com npm run dev no token is required in public demo mode by default api endpoints require a jwt and post endpoints always require one contributing we actively welcome contributions from students and developers at all levels ways to contribute add a new misconfiguration scan rule add a compliance framework mapping write a remediation playbook fix a bug improve documentation see contributing md for a full guide including how to add your first rule in under 30 minutes contributors are credited below roadmap project scaffolding core scanner engine azure sdk integration 30 scan rules flask api postgresql schema post quantum cryptography scanner az pqc 001 to az pqc 003 react dashboard live on vercel cis benchmark compliance mapping soc 2 compliance mapping sentinel alert integration real world breach scenarios documented first external contributor pr merged azure cli remediation playbook library nist csf iso 27001 mappings github actions ci pipeline project website with docs blog rules gallery and playground live end to end data wiring all api endpoints serving real data multi cloud support aws gcp license mit free to use modify and distribute built by security engineers and students who believe cloud security tooling should be accessible to everyone learn openshield learn openshield covers azure cspm fundamentals openshield architecture compliance mappings remediation workflows contributor onboarding documentation navigation live learning portal https openshieldlearn netlify app learn full documentation the security rules gallery blog and interactive playground are available at the project website openshield website vercel app api reference full api documentation is available at docs api reference md changelog see changelog md for the full release history about open source cspm for azure scan for misconfigurations and quantum unsafe cryptography map findings to cis nist iso27001 soc2 and fix them with one command topics python open source owasp compliance post quantum cryptography security scanner security tools cloud security azure security misconfiguration azure devops devsecops pipeline cspm resources readme license mit license code of conduct code of conduct contributing contributing security policy security policy uh oh there was an error while loading please reload this page activity custom properties stars 54 stars watchers 1 watching forks 64 forks report repository releases 2 openshield v0 3 0 latest jul 8 2026 1 release packages 0 uh oh there was an error while loading please reload this page uh oh there was an error while loading please reload this page contributors uh oh there was an error while loading please reload this page languages python 57 1 javascript 28 2 shell 7 2 html 6 6 hcl 0 6 css 0 2 other 0 1 footer 2026 github inc footer navigation terms privacy security status community docs contact manage cookies do not share my personal information you can t perform that action at this time