Alternatives and similar repositories for SSVC:

Users that are interested in SSVC are comparing it to the libraries listed below

• theparanoids / PrioritizedRiskRemediation
  A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).
  ☆70Updated 8 months ago
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆63Updated this week
• anchore / nvd-data-overrides
  ☆47Updated this week
• OWASP / OpenCRE
  ☆91Updated 2 months ago
• cisagov / CSAF
  CISA CSAF Security Advisories
  ☆58Updated this week
• OWASP / www-project-vulnerability-management-guide
  OWASP Foundation Web Respository
  ☆28Updated 2 years ago
• CloudSecurityAlliance / gsd-tools
  Global Security Database Tools
  ☆42Updated last year
• adamshostack / DFD3
  ☆71Updated 3 months ago
• Deploying-Securely / DSRAM
  ☆16Updated last year
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆75Updated 5 months ago
• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆130Updated last year
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆90Updated last year
• oasis-tcs / csaf
  OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…
  ☆155Updated last week
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆68Updated last month
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆170Updated 2 months ago
• Threat-Modeling-Manifesto / threat-modeling-manifesto
  Threat Modeling Manifesto
  ☆27Updated 6 months ago
• enisaeu / CNW
  Advisories, guidance, best practice documents and more issued by members of the EU CSIRTs network, a network composed of EU Member States…
  ☆56Updated last week
• packetchaos / navi
  A Command-line tool which leverages the Tenable.io API to reduce the time it takes to get information that is common during remediation o…
  ☆74Updated 4 months ago
• OWASP / www-project-cyber-defense-matrix
  Documentation on the Cyber Defense Matrix
  ☆24Updated last year
• ksthk / one
  One Conference 2024
  ☆101Updated 3 months ago
• center-for-threat-informed-defense / mappings-explorer
  Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogue…
  ☆50Updated this week
• mitre / saf
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…
  ☆141Updated this week
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆24Updated 2 years ago
• opencybersecurityalliance / casp
  ☆18Updated 9 months ago
• kenhuangus / Artificial-Intelligence-Vulnerability-Scoring-System-AIVSS
  ☆34Updated last month
• kempy007 / VulManAgg
  Docs: Vulnerability management aggregation of AppSec & OpSec (Tools Listing)
  ☆30Updated last year
• adamshostack / conflictmodeling
  A place to gather and organize information about using threat modeling frameworks to deal with social conflict in online systems
  ☆56Updated last year
• mitre / engage
  MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.
  ☆62Updated 9 months ago
• dwillowtree / diana
  Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )
  ☆167Updated 4 months ago
• Toreon / threat-model-playbook
  ☆82Updated 3 years ago