DefectDojo / sample-scan-files
Sample scan files for testing DefectDojo imports
☆77Updated 2 months ago
Alternatives and similar repositories for sample-scan-files:
Users that are interested in sample-scan-files are comparing it to the libraries listed below
- Python API library for DefectDojo☆41Updated 2 years ago
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago
- Docs: Vulnerability management aggregation of AppSec & OpSec (Tools Listing)☆30Updated last year
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆193Updated 6 years ago
- Software Component Verification Standard (SCVS)☆142Updated 11 months ago
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Updated 3 months ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆278Updated this week
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆156Updated 3 years ago
- OWASP Foundation Threat Dragon Project Web Repository☆78Updated this week
- VMC: a Scalable, Open Source and Free Vulnerability Management Platform☆89Updated 2 months ago
- ☆85Updated 3 years ago
- ☆123Updated last year
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated 2 years ago
- Container Security Verification Standard☆58Updated 5 years ago
- ☆63Updated 2 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆61Updated 9 months ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆134Updated 4 years ago
- 🖇️ STRIDE vs. ASVS equivalence table☆76Updated 7 months ago
- DevSecOps Toolchain☆111Updated 7 years ago
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…☆110Updated last year
- A Burp plugin to export findings to DefectDojo☆30Updated last year
- OWASP Foundation Web Respository☆29Updated 2 years ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆105Updated 2 years ago
- Open source security career ladders☆115Updated 2 years ago
- GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file☆13Updated 10 months ago
- A Command-line tool which leverages the Tenable.io API to reduce the time it takes to get information that is common during remediation o…☆74Updated 6 months ago
- The Secure Coding Framework☆268Updated 4 years ago
- threatspec - continuous threat modeling, through code☆348Updated 4 years ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆107Updated last year