Skip to content
SPECIFICTION
Get listed

ZeusCloud

github.com

Free plan WebSelf-hosted
Visit github.com
Spec score 7.1 #19 of 28 in Cloud Vulnerability Scanners

What it is

ZeusCloud is a free, open-source, self-hosted platform for discovering, prioritizing, and remediating cloud security risks. It builds inventories of AWS account assets and monitors environments for attack paths and misconfigurations. The platform identifies combinations of risks that could let an attacker penetrate an environment. Access Explorer visualizes who can access what through an IAM visualization engine. Findings can be filtered, sorted, searched, and viewed with graphical context. Users can configure active rules, mute alerts, and modify or write rules as security as code. Step-by-step remediation guidance accompanies findings. The project describes support for PCI DSS and CIS benchmarks and uses Cartography for asset inventory; integrations with vulnerability and secret scanners are listed as roadmap items. The quick start clones the repository, runs make quick-deploy, and opens the interface at localhost:80. An enterprise cloud-hosted offering is available by contacting the maker. The project advises against public exposure and recommends current versions for security patches.

Spec sheet

Purpose
ZeusCloud is an open source preventative cloud security platform for discovering, prioritizing, and remediating cloud risks.Read 3 Oct 2026 · docs.zeuscloud.io
Deployment
The quick start clones the repository, runs make quick-deploy, and opens the interface at localhost:80.Read 3 Oct 2026 · github.com
Integrations
ZeusCloud uses Cartography for its asset inventory; integrations with vulnerability scanners and secret scanners are listed as roadmap items.Read 3 Oct 2026 · github.com
Compliance
The project describes support for PCI DSS and CIS benchmarks, among other standards.Read 3 Oct 2026 · github.com
Attack paths
ZeusCloud identifies toxic risk combinations that an attacker could use to penetrate an environment.Read 3 Oct 2026 · github.com
Cloud coverage
The platform builds asset inventories of AWS accounts and monitors environments for attack paths and misconfigurations.Read 3 Oct 2026 · docs.zeuscloud.io
Cloud-hosted access
The maker says its cloud-hosted enterprise offering is available by contacting [email protected].Read 3 Oct 2026 · docs.zeuscloud.io
Controls
Users can configure active security rules, mute alerts, and modify or write rules using security as code.Read 3 Oct 2026 · docs.zeuscloud.io
IAM visibility
Its Access Explorer visualizes who has access to what using an IAM visualization engine.Read 3 Oct 2026 · github.com
Prioritization
Users can filter, sort, and search findings and review graphical context around risks.Read 3 Oct 2026 · docs.zeuscloud.io
Remediation
ZeusCloud provides step-by-step guides to remediate security findings.Read 3 Oct 2026 · docs.zeuscloud.io
Security guidance
The project advises against exposing ZeusCloud to the public internet and recommends using the latest versions for security patches.Read 3 Oct 2026 · github.com
Vulnerability reporting
Security issues can be reported to [email protected].Read 3 Oct 2026 · github.com

Plans and prices

Open source Free Apache 2.0 licensed; self-hosted Read 3 Oct 2026 · github.com
Cloud hosted Priced on request Enterprise license; includes user management and advanced attack path analysis Read 3 Oct 2026 · docs.zeuscloud.io

Every ZeusCloud plan and price →

Strong points and limits

Strong points

  • AWS asset inventory and attack-path analysis
  • IAM Access Explorer visualization
  • Rules can be written as security as code
  • Step-by-step remediation guidance
  • Free Apache 2.0 self-hosted plan

Limits

  • Self-hosted quick start requires repository deployment
  • Public internet exposure is discouraged
  • Vulnerability scanner integrations are roadmap items

Who it suits

It suits teams assessing AWS environments that can deploy and operate self-hosted security tooling. Organizations wanting managed access can contact the maker about the cloud-hosted enterprise offering.

Verdict

ZeusCloud combines AWS inventory, attack-path analysis, IAM visibility, configurable rules, and remediation guidance in a self-hosted package. Teams must handle deployment and avoid public exposure, while some integrations remain roadmap items.

Where Specifiction places it

Alternatives to ZeusCloudAll alternatives →