Launch Week Day 5: Unveiling Cloud Security List

Finding the right cloud security tools shouldn’t be a full-time job. Yet cloud security engineers often spend countless hours researching solutions, comparing vendors, and trying to make sense of an increasingly complex landscape.

The challenge isn’t just the number of tools available—it’s cutting through marketing speak to understand what each solution actually does, which problems it solves, and whether it fits your needs.

Today, we’re introducing Cloud Security List: a free, searchable directory of cloud security tools and resources. Our goal is simple: help engineers find the right tools quickly, so they can focus on what matters—keeping their cloud environments secure.

From simple list to searchable directory ​

Cloud Security List began as a simple Markdown file on GitHub created by our CEO Lars, where we collected links to various cloud security tools. As the list grew, we realized two things:

1. The cloud security community needed a better way to discover and evaluate tools
2. A static list of links wasn’t enough—engineers needed context and filtering capabilities

We’ve transformed that simple list into a comprehensive resource that helps you navigate the cloud security landscape efficiently.

Key features ​

Searchable catalog ​

• Over 90 security vendors with concise, marketing-free descriptions
• More than 25 open-source projects/tools for engineers who prefer to build and customize
• Filtering by product category and cloud provider support
• Clear descriptions focused on actual functionality

Product category guide ​

• More than 65 product categories with clear, technical explanations
• Each category page shows relevant vendors and open-source tools
• Detailed descriptions of cloud security segments like CSPM and CNAPP

Additional resources ​

• Curated collection of security podcasts and newsletters
• Directory of cloud security research teams and organizations
• Timeline of relevant company acquisitions in the cloud security space

Built for the community ​

Cloud Security List was built with Next.js and Sanity and is completely free and open source. The source code is publicly available on GitHub at someengineering/cloudsecuritylist.com.

We’re committed to maintaining this as an unbiased, vendor-neutral resource. While we’re proud to create this as part of Fix Security, our focus is on providing genuine value to the cloud security community.

Contribute to Cloud Security List ​

The current list are just the beginning. We’re actively expanding the directory and welcome contributions from the community. Whether you’re an engineer who knows a great tool or a vendor wanting to add or update your company’s listing (here’s the Fix Security listing as an example), we want to hear from you.

Found a tool that should be listed? Notice anything that needs updating? We welcome your feedback at info@cloudsecuritylist.com!

Simplifying cloud security research ​

Cloud security engineers are notoriously overworked and under-resourced. Cloud Security List aims to make their lives easier by providing a clear, unbiased view of available tools and resources.

We invite you to explore Cloud Security List and help us grow it into an even more comprehensive resource for the cloud security community.