Radar check
What we found when we opened it. Every bar is one fact, with its date.
Last code pushed 9 Feb 2026, 8 months before this check.
No releases published on GitHub; the code date above is the one to trust.
Public since February 2020, a little over 6 years.
1,049 stars and 138 forks.
0 commits and 0 new issues in the last 90 days.
21 contributors. No pull requests merged in 90 days; changes go in directly.
No security policy file says how to report a problem. No published security advisories.
How the bars are scored
- Alive. Days since the last code push: a week or less 100, a month 90, three months 70, six months 50, a year 30, eighteen months 15, older 0.
- Releases. Age of the latest GitHub release, on a similar scale; no bar when the project publishes no releases.
- Maturity. Age of the project: eight years 100, five 90, three 70, two 55, one 40, six months 25, younger 10.
- Adoption. Stars on a log scale: 100,000 stars is 100, 10,000 is 80, 1,000 is 60, 100 is 40.
- Activity. Commits in the last 90 days: 300 or more 100, 100 85, 30 65, 10 45, any 25.
- Community. People who have contributed: 100 or more 100, 30 80, 10 60, 5 40, 2 25, one 10.
- Security. A published security policy 80, none 40; published advisories are listed, not scored.
Checked by Repo Radar on 26 Oct 2026 from the repository on GitHub.
In simple English
This tool checks the security settings of your cloud accounts and software services. It runs tests across hundreds of services to find misconfigurations and exposed data. It maps these findings to compliance frameworks such as HIPAA, SOC 2, and NIST. You run it from your command line or inside a Docker container. It is free to use under an open-source licence.
What it is
ElectricEye is a Python command-line utility for multi-cloud asset management, security posture management, and attack surface monitoring. It executes over a thousand individual checks across cloud providers and software-as-a-service platforms.
What it is good for
Security engineers and system administrators who need an automated way to audit cloud configurations and verify compliance across multiple platforms without paying for commercial cloud security tools.
- Supports multiple major cloud providers and SaaS platforms in one tool.
- Maps findings to more than twenty regulatory and industry frameworks.
- Exports reports to databases, JSON files, HTML, and Slack.
- Requires extensive permissions and IAM role setup across each cloud provider.
- Configuration involves editing TOML files or passing multiple environment variables.
- Heavy reliance on command-line usage and manual verification of findings.
manual cloud security audits
awscli
- aquasecurity/trivy39k stars
Scans container images, filesystems, and cloud configurations for security issues.
- prowler-cloud/prowler15k stars
Performs cloud security assessments and compliance audits across multiple cloud providers.
- goauthentik/authentik26k stars
One place for people to sign in, which every other tool can ask instead of keeping its own passwords.
- cossacklabs/themis2.0k stars
Four ready-made encryption jobs with the choices already made, in fifteen languages.
- smallstep/certificates9.0k stars
A certificate authority you run yourself, for machines the public internet cannot reach.
git clone https://github.com/jonrau1/ElectricEye.git cd ElectricEye pip3 install -r requirements.txt