Alternatives and similar repositories for Community-Contribs

Users that are interested in Community-Contribs are comparing it to the libraries listed below

• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆68Updated 5 months ago
• DefectDojo / sample-scan-files
  Sample scan files for testing DefectDojo imports
  ☆85Updated 3 months ago
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆52Updated 2 weeks ago
• JupiterOne / secops-automation-examples
  Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.
  ☆54Updated this week
• meta-fun / awesome-software-supply-chain-security
  Sharing software supply chain security open source projects
  ☆53Updated 2 years ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆48Updated 9 years ago
• DevSlop / pixi-crs
  CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.
  ☆15Updated 4 years ago
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆43Updated 2 years ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• OWASP / OpenCRE
  ☆131Updated last month
• OpenSecuritySummit / oss-website
  The Open Security Summit is focused on the collaboration between, Developers and Application Security
  ☆45Updated 5 months ago
• DSecureMe / vmc
  VMC: a Scalable, Open Source and Free Vulnerability Management Platform
  ☆91Updated 10 months ago
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆57Updated 2 months ago
• kannkyo / epss-api
  EPSS(Exploit Prediction Scoring System) API client
  ☆19Updated last month
• lightspin-tech / red-bucket-gcp
  ☆10Updated 3 years ago
• Mixeway / MixewayHub
  Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…
  ☆110Updated last year
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆15Updated 2 years ago
• Comcast / xGitGuard
  AI based Secrets Detection Python Framework
  ☆62Updated 6 months ago
• franksec42 / Vulnerability-management-maturity
  Maturity Model Collaborative project
  ☆15Updated 2 years ago
• OWASP / cornucopia
  The source files and tools needed to build the OWASP Cornucopia decks in various languages
  ☆85Updated this week
• cve-search / cpe-guesser
  Tool to guess CPE name based on common software name
  ☆106Updated 2 months ago
• FIRSTdotorg / cvss-v4-calculator
  CVSS v4.0 calculator
  ☆37Updated last year
• ComplianceAsCode / auditree-framework
  The Auditree framework tool to run compliance control checks as unit tests.
  ☆72Updated last year
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆61Updated 6 months ago
• opencybersecurityalliance / PACE
  Posture Attribute Collection and Evaluation
  ☆24Updated 2 years ago
• CERTCC / SSVC
  Stakeholder-Specific Vulnerability Categorization
  ☆166Updated this week
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…
  ☆131Updated 2 weeks ago
• OWASP / SEDATED
  SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)
  ☆110Updated 10 months ago
• mitre / saf
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…
  ☆166Updated this week
• sttor / osquery-wazuh-response
  Active Response plugin. Osquery to execute wazuh/ossec active response plugins. You can write your own plugins, easy to plug
  ☆11Updated 5 years ago