CSPM

Premium

Cloud Security Posture Management scans your cloud infrastructure for security misconfigurations. CodePhreak uses Prowler under the hood to provide comprehensive multi-cloud scanning.

Quick Start

# Basic AWS scan
$ codephreak cspm --provider aws

# With specific profile and regions
$ codephreak cspm --provider aws --profile production --regions us-east-1,us-west-2

# CIS compliance check
$ codephreak cspm --provider aws --compliance cis

# Output to SARIF format
$ codephreak cspm --provider aws --output report.sarif --format sarif

Supported Providers

AWS

Amazon Web Services

codephreak cspm --provider aws

Azure

Microsoft Azure

codephreak cspm --provider azure

GCP

Google Cloud Platform

codephreak cspm --provider gcp

Command Options

Option	Description	Default
--provider	Cloud provider (aws, azure, gcp)	aws
--profile	AWS profile or Azure subscription ID	default
--regions	Comma-separated regions to scan	all
--compliance	Compliance framework (cis, soc2, pci, hipaa)	-
--output	Output file path	-
--format	Output format (json, sarif, csv)	json

Compliance Frameworks

CIS Benchmarks

Center for Internet Security best practices

--compliance cis

SOC 2

Service Organization Control 2

--compliance soc2

PCI DSS

Payment Card Industry Data Security Standard

--compliance pci

HIPAA

Health Insurance Portability and Accountability Act

--compliance hipaa

Example Output

$ codephreak cspm --provider aws

🔍 Starting CSPM scan: AWS with prowler
   Profile: default
   Regions: all

┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃     CSPM Scan Results (AWS)            ┃
┡━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
│ Total Checks  : 245                    │
│ Passed        : 198 (80.8%)            │
│ Failed        : 42                     │
│ Manual Review : 5                      │
├────────────────────────────────────────┤
│ Critical : 3    High : 12              │
│ Medium   : 18   Low  : 9               │
└────────────────────────────────────────┘

🔴 Critical Findings:
  • S3 bucket 'logs-bucket' has public access
  • IAM user 'admin' has no MFA enabled
  • RDS instance 'prod-db' is publicly accessible

📊 Results synced to dashboard
   View at: https://codephreak.ai/dashboard

Prerequisites

AWS

• AWS CLI installed and configured (aws configure)
• IAM permissions: SecurityAudit policy or equivalent read-only access
• Prowler installed (pip install prowler)

Azure

• Azure CLI installed and logged in (az login)
• Reader role on target subscription

GCP

• gcloud CLI installed and authenticated
• Viewer role on target project

Dashboard Visualization

CSPM results are automatically synced to the web dashboard where you can:

View severity breakdown charts
Filter by service and region
Export findings to various formats
Track remediation progress over time

Try the Dashboard Demo