CIOPages
For vendors— is your company listed?
Claim a listing Submit a listing Promote your companyPricing & info
DirectoryCybersecurityCloud Security & CSPMPacu

Pacu

Open Source

About Pacu

Pacu is an open-source framework designed specifically for offensive security testing within Amazon Web Services (AWS) environments. It enables security professionals, particularly penetration testers, to identify and exploit configuration vulnerabilities in AWS accounts. By leveraging modular functionality, Pacu supports a wide range of attack simulations such as privilege escalation, IAM user backdooring, and exploitation of vulnerable Lambda functions. This makes it a valuable tool for organizations aiming to assess and strengthen their cloud security posture.

The framework is maintained by Rhino Security Labs and is intended for enterprise security teams and consultants focused on cloud security posture management. Its lightweight design requires only Python 3.7+ and pip for installation, with options for Docker deployment to facilitate integration into existing security workflows. Pacu’s extensible module system allows users to expand its capabilities, ensuring adaptability to evolving cloud security challenges. As an open-source tool, it provides transparency and flexibility for organizations committed to rigorous cloud security assessments.

Key Capabilities

  • ✓AWS environment exploitation and testing
  • ✓User privilege escalation modules
  • ✓IAM user backdooring functionality
  • ✓Vulnerable Lambda function attacks
  • ✓Modular and extensible framework design

Integrations

AWS IAMAWS LambdaDocker

Related Buyer Guides

Independent evaluation frameworks for this category.

API Security Platforms
The API is now the primary attack surface, and a WAF pointed at it isn't API security. Evaluate Salt, Akamai (Noname), Imperva, F5, Traceable, Wallarm, Cequence, and Data Theorem on whether they actually discover your shadow APIs and catch BOLA and business-logic abuse at runtime — not just sign endpoints off as “protected.”
Attack Surface Management (ASM / CTEM)
Evaluate Wiz, CrowdStrike Falcon Surface, Microsoft Defender EASM, Cortex Xpanse, Censys, CyCognito, Tenable, and runZero across EASM, CAASM, and platform-embedded camps — judged on discovery accuracy and how cleanly the surface feeds prioritization, not how many assets it claims to find.
Cloud Access Security Broker (CASB)
Evaluate Netskope, Microsoft Defender for Cloud Apps, Zscaler, and Palo Alto for SaaS security, shadow IT discovery, and data protection.

This profile was compiled by CIOPages from public sources with AI assistance, and may be incomplete or out of date. It is informational only and not an endorsement. Represent this vendor? Claim this listing or .

Quick Facts

github.com/RhinoSecurityLabs/pacu
CategoryCybersecurity
SubcategoryCloud Security & CSPM
PricingOpen Source
DeploymentOpen Source
Target SizeEnterprise