Open Source Alternatives
  • Alternatives
  • Categories
    Categories by size882 projects
    • Developer Tools461
    • AI & Machine Learning404
    • Web Development196
    • Business & Productivity191
    • Communication & Collaboration126
    • Security & Monitoring126
    • IT Management123
    • Product & Project Management106
    • Cloud & Hosting105
    • Data & Analytics104
    Browse all 21 categoriesLLMOps & AI Tooling, Design & Creative and 9 more
  • Blog
  • Advertise
SearchNotion, Slack, password manager.../
Submit
Open Source Alternatives
  • Alternatives
    • Developer Tools461
    • AI & Machine Learning404
    • Web Development196
    • Business & Productivity191
    • Communication & Collaboration126
    • Security & Monitoring126
    • Browse all 21 categories
  • Blog
  • Advertise
Submit your project

New open source projects by email

The projects we add and every new guide. Free, unsubscribe any time.

Open Source Alternatives LogoOpen Source Alternatives

Handpicked Open Source Alternatives to Paid Softwares

Product

  • Categories
  • Tag
  • Advertise

Resources

  • Blog
  • Collection
  • Submit

Company

  • Privacy Policy
  • Terms of Service
  • Refund Policy
  • Sitemap

Alternatives

  • Claude Code
  • Jira
  • Notion
  • Slack
  • Linear
  • Wispr Flow
  • All alternatives
© 2026 Open Source Alternatives. All rights reserved.
Open SourceAlternatives
Home/Categories/Security & Monitoring/CloudQuery
icon of CloudQuery

CloudQuery

Open source alternative to Wiz, Flexera and Orca Security

  • 6.5K stars
  • MPL-2.0
  • Active this week
  • Last commit 2 days ago

Last verified Oct 21, 2026

CloudQuery is an open source cloud asset inventory platform that syncs infrastructure data from AWS, GCP, Azure, and 150+ providers into your own SQL database for security, compliance, and cost queries. MPL-2.0 licensed.

Visit websiteGitHub6.5K stars
image of CloudQuery
TL;DR

CloudQuery is an MPL-2.0 cloud asset inventory and ELT tool for teams that want infrastructure data from AWS, GCP, Azure, SaaS tools, and other providers in their own database. It syncs provider data into SQL destinations for security, compliance, cost, and operational queries. Best for cloud security and platform teams that prefer querying their own inventory instead of buying a closed CSPM dashboard first.

Read the full breakdownHide the full breakdownWho it is for, how it works, trade-offs and the FAQ
who it's for

Who CloudQuery is for#

Cloud security teams building asset inventory

CloudQuery helps security teams centralize cloud asset data for compliance checks, ownership review, and misconfiguration analysis.

Skip if:

Choose a managed CSPM if you need out-of-the-box policies, remediation workflows, and executive dashboards.

Platform teams querying cost and infrastructure data

Platform teams can sync cloud resources into a database and combine them with internal ownership or cost data.

Skip if:

Skip it if no one will maintain provider credentials, sync jobs, schemas, and SQL reporting.

the problem

The problem it solves#

Cloud inventory gets scattered across consoles, accounts, regions, SaaS tools, and exported reports. Security and compliance teams need to answer basic questions about assets, misconfigurations, owners, and costs, but the source data lives behind many APIs.

A closed cloud posture product can help, but it often hides the raw data and query layer. Teams that already use SQL and data warehouses may want inventory data in their own systems.

how CloudQuery solves it

How it solves it#

Provider-to-database sync

CloudQuery syncs asset data from cloud and SaaS providers into destinations where teams can query it directly.

Broad provider coverage

The README describes AWS, Azure, GCP, and 70-plus cloud and SaaS sources, giving teams a wide starting point for infrastructure inventory.

SQL-first inventory analysis

Teams can analyze assets, compliance, and cost questions with their own SQL workflows instead of only using a vendor UI.

MPL-2.0 license

The GitHub repository reports MPL-2.0 licensing, which is a file-level copyleft license teams should understand before modifying code.

strengths · trade-offs

Strengths and trade-offs#

Strengths

  • Own the inventory dataCloudQuery puts cloud asset data in infrastructure the team controls, which helps with audits, custom reporting, and data retention.
  • Fits existing analytics workflowsSecurity and platform teams can use SQL, BI tools, and warehouse workflows they already know.
  • Useful before buying a full CSPM suiteTeams can answer many cloud inventory and compliance questions from raw synced data before committing to a proprietary posture product.

Trade-offs

  • -You build the analysis layerCloudQuery syncs data, but teams still need to write queries, dashboards, alerts, and policies for their specific risks.
  • -Provider coverage needs validationBroad provider counts are useful, but each team should verify the exact services, fields, and sync behavior needed for its accounts.
versus alternatives

CloudQuery vs alternatives#

CloudQuery vs Wiz

CloudQuery and Wiz both help teams understand cloud assets and security posture, but CloudQuery focuses on syncing raw inventory data into your own database. Wiz is a proprietary managed cloud security product with detection, prioritization, and workflow features built in.

CloudQuery is the better fit when a team wants SQL ownership of asset inventory and has the skills to build its own analysis. Wiz is still better when the organization needs a managed CSPM with ready-made detections, prioritization, and security workflows.

tech stack · detected from GitHub

What it's built on#

Languages
GoPythonTypeScript
Databases
BigQuery
Infrastructure
AWSAzureGCPKubernetes
frequently asked

FAQ#

What does CloudQuery do?

CloudQuery syncs cloud and SaaS asset data from providers into databases so teams can query their own infrastructure inventory.

Is CloudQuery only for AWS?

No. CloudQuery supports multiple providers, with the README naming AWS, Azure, GCP, and 70-plus cloud and SaaS sources.

Does CloudQuery replace a CSPM?

It can replace some inventory and query workflows, but teams still need to build policies, dashboards, and remediation processes.

also worth a look

Similar open-source tools#

CrowdSec

Alternative toCloudflare

Community-powered threat detection and IP blocklist

  • 15,226 GitHub stars
  • MITLicence MIT

Shadowbroker

InSecurity & Monitoring

Real-time OSINT map: aircraft, ships, CCTV, satellites, self-hosted.

  • 11,344 GitHub stars
  • AGPL-3.0Licence AGPL-3.0

Worldmonitor

Alternative toSeerist

Self-hosted geopolitical risk map: 58 layer types, 469 OSINT feeds.

  • 88,941 GitHub stars
  • AGPL-3.0Licence AGPL-3.0

Homeio

Alternative toUnraid

Browser desktop for your self-hosted home server

  • 90 GitHub stars
  • AGPL-3.0Licence AGPL-3.0

Pulse

InSecurity & Monitoring

Read-only Windows diagnostics with a local AI assistant.

  • 368 GitHub stars
  • MITLicence MIT

Xray-core

Alternative toAstrill VPN

Open source proxy core with XTLS, VLESS, and REALITY protocols

  • 42,209 GitHub stars
  • MPL-2.0Licence MPL-2.0
by category

Open source tools in these categories#

126

Security & Monitoring

REA (Reverse Engineer Anything), RustDesk, Uptime Kuma
123

IT Management

RustDesk, Immich, Stirling PDF
104

Data & Analytics

Firecrawl, ragflow, Worldmonitor

Featured

Omnara

Alternative toCClaude Managed Agents

Open-source agent deployment API. Self-host or use Omnara Cloud.

  • 2,957 GitHub stars
  • Apache-2.0Licence Apache-2.0
  • #AI Agents

Inbox Zero

Alternative toSuperhuman

AI email assistant that drafts replies and clears your inbox

  • 12,712 GitHub stars
  • AGPL-3.0Licence AGPL-3.0
  • #Email

rakazo

Alternative toGrok Bot

AI teammates you own: your keys, your model, your machine.

  • 4,904 GitHub stars
  • Apache-2.0Licence Apache-2.0
  • #AI Agents
Feature your project

New open source projects by email

The projects we add and every new guide. Free, unsubscribe any time.

Find open source alternatives to paid software

/
  • Claude Code to OpenCode
  • Jira to Windshift
  • Notion to AppFlowy
  • Slack to Mattermost
  • Linear to GitLab
  • Wispr Flow to Handy
  • CapCut to Concat
  • Grok Bot to rakazo
  • Superhuman to Inbox Zero
  • Airtable to AITable
  • Muse to OpenClaw
  • GitHub Copilot to Cline
  • Datadog to Netdata
  • Microsoft Teams to Rocket.Chat
  • Pinecone to Qdrant
  • Zapier to n8n
  • Devin AI to OpenHands
  • Firebase to Supabase
  • 1Password to KeePassXC
  • Confluence to Docmost
  • Contentful to Strapi
  • Adobe Premiere Pro to Shotcut
  • ChatGPT to AnythingLLM
  • LangSmith to Langfuse
  • Claude Code to OpenCode
  • Jira to Windshift
  • Notion to AppFlowy
  • Slack to Mattermost
  • Linear to GitLab
  • Wispr Flow to Handy
  • CapCut to Concat
  • Grok Bot to rakazo
  • Superhuman to Inbox Zero
  • Airtable to AITable
  • Muse to OpenClaw
  • GitHub Copilot to Cline
  • Datadog to Netdata
  • Microsoft Teams to Rocket.Chat
  • Pinecone to Qdrant
  • Zapier to n8n
  • Devin AI to OpenHands
  • Firebase to Supabase
  • 1Password to KeePassXC
  • Confluence to Docmost
  • Contentful to Strapi
  • Adobe Premiere Pro to Shotcut
  • ChatGPT to AnythingLLM
  • LangSmith to Langfuse