Alternatives and similar repositories for Community-Contribs

Users that are interested in Community-Contribs are comparing it to the libraries listed below

• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆68Updated 7 months ago
• meta-fun / awesome-software-supply-chain-security
  Sharing software supply chain security open source projects
  ☆53Updated 3 years ago
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆52Updated 2 months ago
• OWASP / www-project-devsecops-maturity-model
  OWASP Foundation Web Respository
  ☆56Updated 4 months ago
• wiz-sec-public / SITF
  A comprehensive framework for analyzing and defending against attacks targeting Software Development Life Cycle Infrastructure.
  ☆97Updated this week
• SAP / cloud-active-defense
  Add a layer of active defense to your cloud applications.
  ☆103Updated last week
• franksec42 / Vulnerability-management-maturity
  Maturity Model Collaborative project
  ☆15Updated 2 years ago
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆16Updated 2 years ago
• tenable / terrascan-rego-editor
  Visual Studio Code extension for writing Terrascan Rego policies
  ☆22Updated last year
• OWASP / OpenCRE
  ☆138Updated this week
• lightspin-tech / red-bucket-gcp
  ☆10Updated 3 years ago
• kannkyo / epss-api
  EPSS(Exploit Prediction Scoring System) API client
  ☆20Updated 3 months ago
• mitre / vulcan
  A web application to streamline the development of STIGs from SRGs
  ☆83Updated 2 weeks ago
• DefectDojo / sample-scan-files
  Sample scan files for testing DefectDojo imports
  ☆85Updated 5 months ago
• mitre / saf
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…
  ☆171Updated this week
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆43Updated 2 years ago
• mitre / heimdall_tools
  DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications
  ☆35Updated 4 years ago
• JupiterOne / secops-automation-examples
  Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.
  ☆55Updated last month
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆75Updated 2 years ago
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆97Updated 11 months ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆47Updated 9 years ago
• opencybersecurityalliance / PACE
  Posture Attribute Collection and Evaluation
  ☆23Updated 2 years ago
• SecureStackCo / visualizing-software-supply-chain
  A project to visualize the software supply chain
  ☆58Updated 2 years ago
• Ask-Sage / NIST-800-53-Automation
  This python app generates NIST 800 53 control implementation for each control and generate the CSV file.
  ☆53Updated 2 years ago
• DevSlop / pixi-crs
  CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.
  ☆15Updated 4 years ago
• DSecureMe / vmc
  VMC: a Scalable, Open Source and Free Vulnerability Management Platform
  ☆91Updated last year
• ComplianceAsCode / auditree-framework
  The Auditree framework tool to run compliance control checks as unit tests.
  ☆71Updated last year
• VerSprite / fork-community
  Fork Threat Modeling Platform - Community
  ☆27Updated 3 months ago
• theparanoids / PrioritizedRiskRemediation
  A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).
  ☆83Updated last year
• CERTCC / SSVC
  Stakeholder-Specific Vulnerability Categorization
  ☆170Updated last week