BugAlertDotOrg / bugalert

Related projects ⓘ

Alternatives and complementary repositories for bugalert

• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆181Updated 4 months ago
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆309Updated this week
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆401Updated 2 months ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆232Updated this week
• Threagile / threagile
  Agile Threat Modeling Toolkit
  ☆621Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆169Updated this week
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆499Updated this week
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆267Updated 2 months ago
• cisagov / bad-practices
  CISA's catalog of bad practices that are exceptionally risky.
  ☆203Updated 2 weeks ago
• segmentio / threat-modeling-training
  Segment's Threat Modeling training for our engineers
  ☆238Updated 3 years ago
• securitytemplates / sectemplates
  Open source templates you can use to bootstrap your security programs
  ☆515Updated 3 weeks ago
• mubix / CVE-2021-44228-Log4Shell-Hashes
  Hashes for vulnerable LOG4J versions
  ☆154Updated 2 years ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆658Updated last year
• TURROKS / CVE_Prioritizer
  Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time thre…
  ☆532Updated 2 weeks ago
• wiz-sec-public / cloud-middleware-dataset
  ☆240Updated 4 months ago
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆515Updated last week
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆254Updated last week
• elastic / dorothy
  Dorothy is a tool to test security monitoring and detection for Okta environments
  ☆175Updated 3 months ago
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆397Updated last month
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆335Updated 2 years ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆137Updated 2 years ago
• G-Research / siembol
  An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced sec…
  ☆200Updated last month
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆332Updated 3 years ago
• panther-labs / panther-analysis
  Built-in Panther detection rules and policies
  ☆339Updated this week
• Accenture / jenkins-attack-framework
  ☆555Updated 3 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆121Updated last year
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆739Updated 4 months ago
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆282Updated last year
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆180Updated last week
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆331Updated 8 months ago