Alternatives and similar repositories for sast-scan:

Users that are interested in sast-scan are comparing it to the libraries listed below

• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆279Updated last month
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆179Updated 6 years ago
• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆58Updated 5 years ago
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆839Updated last year
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆357Updated 4 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆123Updated last year
• banzaicloud / dast-operator
  Dynamic Application and API Security Testing
  ☆192Updated 2 years ago
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆194Updated 6 years ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆48Updated 8 years ago
• Morningstar / GoASQ
  General Open Architecture Security Questionnaire
  ☆32Updated last year
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆220Updated 11 months ago
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆109Updated last year
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆94Updated 6 months ago
• PaperMtn / gitlab-watchman
  Finding exposed secrets and personal data in GitLab
  ☆197Updated 5 months ago
• auth0 / repo-supervisor
  Scan your code for security misconfiguration, search for passwords and secrets.
  ☆646Updated last year
• stuhirst / awssecurity
  for AWS Security material
  ☆247Updated 3 years ago
• zemmali / DevSecOps-Toolchain
  DevSecOps Toolchain
  ☆111Updated 7 years ago
• xfhg / intercept
  INTERCEPT / Policy as Code Auditing & Compliance
  ☆84Updated 3 months ago
• secmerc / materialize-threats
  ☆63Updated 2 years ago
• faloker / purify
  All-in-one tool for managing vulnerability reports from AppSec pipelines
  ☆106Updated 2 years ago
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆274Updated 2 years ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆426Updated this week
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆41Updated 2 years ago
• DSecureMe / vmc
  VMC: a Scalable, Open Source and Free Vulnerability Management Platform
  ☆90Updated 3 months ago
• checkmarx-ltd / cx-flow
  Checkmarx Scan and Result Orchestration
  ☆96Updated this week
• nccgroup / G-Scout
  Google Cloud Platform Security Tool
  ☆234Updated 5 years ago
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆386Updated 5 years ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆138Updated 2 years ago
• Santandersecurityresearch / asvs
  A simple web app that helps developers understand the ASVS requirements.
  ☆157Updated 2 months ago
• OWASP / RiskAssessmentFramework
  The Secure Coding Framework
  ☆268Updated 4 years ago