☆127Nov 8, 2023Updated 2 years ago
Alternatives and similar repositories for OWASP-ASVS-4.0-testing-guide
Users that are interested in OWASP-ASVS-4.0-testing-guide are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ZAP scripts to implement ASVS L1 checking☆17Apr 28, 2022Updated 4 years ago
- ☆35May 13, 2021Updated 5 years ago
- A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0☆170Oct 8, 2026Updated 3 weeks ago
- OWASP Application Security Verification Standard 4.0 Checklist☆33Apr 15, 2019Updated 7 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Nov 2, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated 2 years ago
- Externalize Java application access to protected resources as log messages.☆47Jul 15, 2026Updated 3 months ago
- Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0☆41Dec 8, 2022Updated 3 years ago
- We borrow the concept of 'personas' from UX/service design and apply it to threat actors to improve understanding between security, techn…☆11Jun 17, 2020Updated 6 years ago
- ☆21Jan 18, 2022Updated 4 years ago
- ☆30Jul 29, 2021Updated 5 years ago
- A small tool to help developers understand a huge set of security requirements from appsec teams☆48Sep 2, 2022Updated 4 years ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆111Jan 16, 2024Updated 2 years ago
- Puma Prey contains vulnerable .NET target applications to test the Puma Scan rules against. This project contains Web Forms, MVC5, and Co…☆22Oct 5, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).☆123Apr 14, 2023Updated 3 years ago
- Segment's Threat Modeling training for our engineers☆243May 4, 2021Updated 5 years ago
- Application Security Verification Standard☆3,764Updated this week
- ☆15Dec 3, 2022Updated 3 years ago
- ☆285Dec 1, 2022Updated 3 years ago
- OWASP ASVS checklist for audits☆220Sep 2, 2026Updated 2 months ago
- A Continuous Threat Modeling methodology☆329Jun 24, 2022Updated 4 years ago
- This repository stores content that can be used to design a Rapid Threat Model Prototyping process for a software development group.☆163Mar 14, 2023Updated 3 years ago
- GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other…☆11Feb 6, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Yet Another SCA tool☆13Nov 10, 2022Updated 3 years ago
- Threat Modeling Manifesto☆31May 28, 2026Updated 5 months ago
- ☆41Mar 8, 2022Updated 4 years ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Sep 14, 2021Updated 5 years ago
- Software Component Verification Standard (SCVS)☆173Apr 1, 2025Updated last year
- OAuth 2.0 Dynamic Security Scanner☆33Feb 27, 2021Updated 5 years ago
- ☆32May 22, 2023Updated 3 years ago
- ☆17Apr 14, 2026Updated 6 months ago
- Draw.io libraries for threat modeling diagrams☆807Nov 12, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆77Mar 4, 2022Updated 4 years ago
- Provide some tips to handle Injection into application code (OWASP TOP 10 - A1).☆10Nov 11, 2020Updated 5 years ago
- CLI Application to Add EPSS Data to your CSV Files☆11Jun 1, 2023Updated 3 years ago
- Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution PoC (CVE-2021-41773 & CVE-2021-42013)☆13Aug 22, 2025Updated last year
- ☆68Jul 18, 2025Updated last year
- ☆18Apr 21, 2020Updated 6 years ago
- PayloadsAllTheThings Skills Plugin for Claude Code☆21Jan 3, 2026Updated 10 months ago