Alternatives and similar repositories for sast-scan

Users that are interested in sast-scan are comparing it to the libraries listed below

• zemmali / DevSecOps-Toolchain
  DevSecOps Toolchain
  ☆113Updated 7 years ago
• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆58Updated 5 years ago
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆848Updated last year
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆99Updated 3 weeks ago
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆282Updated last month
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆362Updated 4 years ago
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆94Updated 9 months ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆181Updated 6 years ago
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆273Updated 2 years ago
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆42Updated 2 years ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆48Updated 8 years ago
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆110Updated last year
• PaperMtn / gitlab-watchman
  Finding exposed secrets and personal data in GitLab
  ☆199Updated 8 months ago
• auth0 / repo-supervisor
  Scan your code for security misconfiguration, search for passwords and secrets.
  ☆649Updated 2 years ago
• insidersec / insider
  Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilit…
  ☆544Updated 3 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆124Updated last year
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆195Updated 6 years ago
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆223Updated last year
• secmerc / materialize-threats
  ☆66Updated 3 weeks ago
• checkmarx-ts / checkmarx-python-sdk
  Checkmarx Python SDK
  ☆28Updated 2 weeks ago
• secureCodeBox / secureCodeBox-v2
  This Repository contains the stable beta preview of the next major secureCodeBox (SCB) release v2.0.0.
  ☆24Updated 4 years ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆348Updated 5 years ago
• banzaicloud / dast-operator
  Dynamic Application and API Security Testing
  ☆192Updated 2 years ago
• appsecpipeline / AppSecPipeline-Specification
  AppSecPipeline Specification for DevOps automation.
  ☆40Updated 2 years ago
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆151Updated last year
• OWASP / www-project-threat-dragon
  OWASP Foundation Threat Dragon Project Web Repository
  ☆82Updated last week
• 4ARMED / kubeletmein
  Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.
  ☆161Updated last year
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆323Updated 3 years ago
• hysnsec / awesome-sca
  A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.
  ☆107Updated 8 months ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆149Updated 4 months ago