Alternatives and similar repositories for sast-scan

Users that are interested in sast-scan are comparing it to the libraries listed below

• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆274Updated 2 years ago
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆844Updated last year
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆358Updated 4 years ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆179Updated 6 years ago
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆282Updated last week
• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆58Updated 5 years ago
• zemmali / DevSecOps-Toolchain
  DevSecOps Toolchain
  ☆112Updated 7 years ago
• PaperMtn / gitlab-watchman
  Finding exposed secrets and personal data in GitLab
  ☆199Updated 7 months ago
• auth0 / repo-supervisor
  Scan your code for security misconfiguration, search for passwords and secrets.
  ☆648Updated 2 years ago
• stuhirst / awssecurity
  for AWS Security material
  ☆248Updated 3 years ago
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆98Updated last month
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆194Updated 6 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆123Updated last year
• Teebytes / TnT-Fuzzer
  OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
  ☆111Updated 2 years ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆172Updated 7 months ago
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆222Updated last year
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆110Updated last year
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆364Updated 6 months ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆345Updated 4 years ago
• NetsOSS / headless-burp
  Automate security tests using Burp Suite.
  ☆227Updated last year
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Updated 3 years ago
• nccgroup / G-Scout
  Google Cloud Platform Security Tool
  ☆234Updated 5 years ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆48Updated 8 years ago
• ICTU / zap2docker-auth-weekly
  Zap baseline scanner in Docker with authentication
  ☆103Updated last year
• checkmarx-ts / checkmarx-python-sdk
  Checkmarx Python SDK
  ☆28Updated last week
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆42Updated 2 years ago
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆94Updated 8 months ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆147Updated 2 months ago
• Morningstar / GoASQ
  General Open Architecture Security Questionnaire
  ☆31Updated last year
• xfhg / intercept
  INTERCEPT / Policy as Code Auditing & Compliance
  ☆84Updated last month