Alternatives and similar repositories for SSVC:

Users that are interested in SSVC are comparing it to the libraries listed below

• theparanoids / PrioritizedRiskRemediation
  A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).
  ☆74Updated 11 months ago
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆193Updated this week
• Deploying-Securely / DSRAM
  ☆16Updated last year
• cisagov / CSAF
  CISA CSAF Security Advisories
  ☆68Updated this week
• OWASP / www-project-cyber-defense-matrix
  Documentation on the Cyber Defense Matrix
  ☆24Updated 2 years ago
• anchore / nvd-data-overrides
  ☆47Updated this week
• center-for-threat-informed-defense / mappings-explorer
  Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogue…
  ☆58Updated this week
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 8 months ago
• CISecurity / CISControls_OSCAL
  A repository containing OSCAL serializations of the CIS Critical Security Controls
  ☆48Updated last month
• enisaeu / CNW
  Advisories, guidance, best practice documents and more issued by members of the EU CSIRTs network, a network composed of EU Member States…
  ☆75Updated last week
• jgamblin / KEV_EPSS
  KEV EPSS Data
  ☆22Updated this week
• opencybersecurityalliance / casp
  ☆19Updated 2 weeks ago
• sckg / sckg
  Security Control Knowledge Graph
  ☆28Updated 11 months ago
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆92Updated 2 months ago
• OWASP / www-project-vulnerability-management-guide
  OWASP Foundation Web Respository
  ☆31Updated 2 years ago
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆25Updated 2 years ago
• cisagov / kev-data
  Mirror of cisa.gov/kev data files
  ☆45Updated this week
• mitre / saf
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…
  ☆149Updated this week
• OWASP / OpenCRE
  ☆100Updated 3 weeks ago
• adamshostack / DFD3
  ☆77Updated 6 months ago
• center-for-threat-informed-defense / insider-threat-ttp-kb
  The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…
  ☆143Updated 7 months ago
• COSSAS / SOARCA
  SOARCA - The Open Source CACAO-based Security Orchestrator!
  ☆72Updated 2 weeks ago
• CISecurity / ControlsAssessmentSpecification
  Controls Assessment Specification
  ☆69Updated 2 weeks ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆171Updated 5 months ago
• oasis-tcs / csaf
  OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…
  ☆170Updated this week
• mitre / engage
  MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.
  ☆63Updated last year
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆193Updated last week
• CycloneDX / transparency-exchange-api
  A standard API specification for exchanging supply chain artifacts and intelligence
  ☆78Updated this week
• owaspsamm / core
  Core model including reused documentation
  ☆96Updated 3 weeks ago
• ksthk / one
  One Conference 2024
  ☆109Updated 6 months ago