Hi all,

I'm an indie dev and standing up some cloud infrastructure for side projects.

I'm wondering what tools/services exist for performing security audits for indie-grade projects.

I have a personal budget of 'some hundreds of dollars' versus an enterprise budget of 'some thousands of dollars'.

Also, I'm not handling, e.g., PCI data, so I don't expect that I require a particularly extensive security audit.

(And, yes, I'm aware 'security' is an ongoing process + multi-layered system. What I'm trying to identify here is a good sanity check before exposing a seemingly hardened host to the open internet.)

Thoughts?