About Project

Kexa

Kexa, your ally in multi-cloud compliance management, simplifies compliance on platforms such as Azure, Google, Amazon and more.

With simple, intuitive rules, even non-experts can guarantee the security of their cloud environments. Kexa, an Open Source tool, offers real-time monitoring, instantly alerting to any deviation from defined rules.

Its detailed reports facilitate compliance analysis, ensuring complete visibility of the state of the infrastructure. Scalable and integrable, Kexa adapts to the evolution of your infrastructure and connects easily to your existing tools.

Turn complexity into simplicity with Kexa, ensuring unrivalled security and turning compliance into a competitive advantage.
Explore the docs »

Report Bug · Request Feature · Put Star

Table of Contents (Presentation & Quick launch)

About Project
- Built With
Quick Launch
- Azure
- AWS
- GCP
- Github
- Kubernetes
- Office 365
- Google Workspace
Results Explanation
Rules Usage
Roadmap
License
Contact

About Project

We have built Kexa to automatize verifications across your working environments (cloud, workspace, APIs endpoints), with a easy-to-deploy script that will allow you to optimize your costs, conformity and security.

It can be deployed as a script, Docker or github action. Kexa is flexible in the way it is deployed, and can be quickly incorporated into CI/CDs or pipeline to guarantee the integrity of your workflow on a hight frequency check.

Clone the repository, follow our setup guide or the quick launch, setup the rules you want to verify from the already available rules file, or build your own.

Run it and get all the available optimizations with the different notification tools (logs, mail, sms, webhook, Teams, and more incoming with generics tools)

With Kexa, you can edit your own rules and retrieve rules or even addons built by the community.

Built With

Runnable in

Compliance

Quick Launch

If you want a complet installation detail, you can refer to this documention

By local script

Clone the repository or use the script to initialize all resources and credentials if you want to get Kexa up and running quickly such as :

Windows:

Invoke-WebRequest -Uri "https://raw.githubusercontent.com/4urcloud/Kexa/dev/initKexa.ps1" -OutFile "./initKexa.ps1"; & "./initKexa.ps1" -d -c
#answer all question to setup

Linux:

curl -sSL https://raw.githubusercontent.com/4urcloud/Kexa/main/initKexa.sh -o initKexa.sh && chmod +x initKexa.sh && ./initKexa.sh -d -c
#answer all question to setup

then:

#dont forget to get [nodejs](https://nodejs.org/en/download) to launch Kexa:
pnpm i --frozen-lockfile
pnpm run start

By Git Action

You can also use the git action of kexa for a quick run with no costs, refer to the reposiroty : Kexa Git Action

We also have a ready-to-run repository, with all addons already configured to run as Git Action, just enter credentials and run ! Ready-to-run repository

By docker

From any folder, create a folder called "config" and create a "default.json" file inside this folder. This file will be populated according to the provider you want to test, as follows.

Don't forget to modify "Absolute/Path/To/config" with the absolute path to your config folder (ex: "C:\Users\MyUser\Documents\Kubernetes" in windows). Obviously, the credentials you supply must have read rights on the environments you want to scan.

Click on the provider you want to fast try:

Azure

default.json:

{
	"azure": [
		{
			"name": "Project A",
			"prefix": "A_",
			"description": "Project A is a quick-launch test",
			"rules": [
				"Economy",
				"OperationalExcellence",
				"Security",
				"rules-testing",
				"Performance"
			]
		}
	]
}