- Home
- Cloud Vulnerability Scanners
- ZeusCloud
ZeusCloud
What it is
ZeusCloud is an open-source cloud security platform for discovering, prioritizing, and remediating risks in AWS environments. It builds asset inventories and monitors for misconfigurations and attack paths, including combinations of risks that could let an attacker enter an environment. Its Access Explorer visualizes who can access which resources through IAM. Users can search, sort, and filter findings, inspect their graphical context, configure active security rules, mute alerts, and write or modify rules using security as code. Step-by-step guidance accompanies findings to support remediation. The project describes support for PCI DSS and CIS benchmarks, among other standards, and uses Cartography for asset inventory; integrations with vulnerability and secret scanners are listed as roadmap items. ZeusCloud is free under the Apache 2.0 license and self-hosted. Setup involves cloning the repository and running `make quick-deploy`, then opening the interface at localhost:80. The project advises against exposing the service to the public internet and recommends using current versions for security patches.
For and against
For
- Free and Apache 2.0 licensed.
- Inventories AWS assets and identifies attack paths.
- Visualizes IAM access with Access Explorer.
- Provides step-by-step remediation guidance.
Against
- Self-hosted deployment requires cloning the repository.
- Scanner integrations are listed as roadmap items.
- The project advises against public internet exposure.
The verdict
ZeusCloud brings AWS asset visibility, attack-path analysis, and remediation guidance into a self-hosted open-source platform. Consider its deployment and exposure guidance before choosing it for an environment.
Who it suits
ZeusCloud suits teams that want to inventory AWS assets, examine IAM access, and prioritize cloud security findings. It is aimed at users able to self-host and configure security rules.
Plans and prices
Open source
Apache 2.0 licensed; self-hosted
Read 3 Oct 2026 · github.com
Cloud hosted
Enterprise license; includes user management and advanced attack path analysis
Read 3 Oct 2026 · docs.zeuscloud.io
On the record
- Attack paths
- ZeusCloud identifies toxic risk combinations that an attacker could use to penetrate an environment.github.com · read 3 Oct 2026
- Cloud coverage
- The platform builds asset inventories of AWS accounts and monitors environments for attack paths and misconfigurations.docs.zeuscloud.io · read 3 Oct 2026
- Cloud-hosted access
- The maker says its cloud-hosted enterprise offering is available by contacting [email protected].docs.zeuscloud.io · read 3 Oct 2026
- Compliance
- The project describes support for PCI DSS and CIS benchmarks, among other standards.github.com · read 3 Oct 2026
- Controls
- Users can configure active security rules, mute alerts, and modify or write rules using security as code.docs.zeuscloud.io · read 3 Oct 2026
- Deployment
- The quick start clones the repository, runs make quick-deploy, and opens the interface at localhost:80.github.com · read 3 Oct 2026
- IAM visibility
- Its Access Explorer visualizes who has access to what using an IAM visualization engine.github.com · read 3 Oct 2026
- Integrations
- ZeusCloud uses Cartography for its asset inventory; integrations with vulnerability scanners and secret scanners are listed as roadmap items.github.com · read 3 Oct 2026
- Prioritization
- Users can filter, sort, and search findings and review graphical context around risks.docs.zeuscloud.io · read 3 Oct 2026
- Purpose
- ZeusCloud is an open source preventative cloud security platform for discovering, prioritizing, and remediating cloud risks.docs.zeuscloud.io · read 3 Oct 2026
- Remediation
- ZeusCloud provides step-by-step guides to remediate security findings.docs.zeuscloud.io · read 3 Oct 2026
- Security guidance
- The project advises against exposing ZeusCloud to the public internet and recommends using the latest versions for security patches.github.com · read 3 Oct 2026
- Vulnerability reporting
- Security issues can be reported to [email protected].github.com · read 3 Oct 2026
