OVAL-Community / OVALLinks
Official repository for the Open Vulnerability and Assessment Language
☆81Updated last week
Alternatives and similar repositories for OVAL
Users that are interested in OVAL are comparing it to the libraries listed below
Sorting:
- A Python library and command line interface for CVE Services.☆70Updated 2 months ago
- Tools for security content automation, baseline tailoring, and overlay development.☆45Updated last year
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆198Updated last week
- Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterp…☆212Updated this week
- The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…☆166Updated this week
- Stakeholder-Specific Vulnerability Categorization☆166Updated this week
- ☆280Updated 2 years ago
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆84Updated last week
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆204Updated 2 months ago
- A ComplianceAsCode blog☆29Updated 2 weeks ago
- Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.☆240Updated last week
- The OVAL Language Schemas☆87Updated last year
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆210Updated last month
- Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool☆38Updated 2 years ago
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated last year
- A web application to streamline the development of STIGs from SRGs☆82Updated last month
- SCAP Scanner And Tailoring Graphical User Interface☆234Updated last year
- Computer Aided Integration of Requirements and Information Security - Server☆166Updated last month
- Exploit Prediction Scoring System (EPSS)☆30Updated 3 years ago
- Secvisogram is a web tool for creating and editing security advisories in the CSAF 2.0 format☆40Updated last week
- CISA CSAF Security Advisories☆90Updated last week
- Global Security Database Tools☆43Updated 2 years ago
- Tools to download or provide CSAF (Common Security Advisory Framework) documents.☆56Updated last week
- Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology☆88Updated 4 months ago
- EPSS(Exploit Prediction Scoring System) API client☆19Updated last month
- OWASP Ontology-driven Threat Modelling framework☆40Updated 2 years ago
- Tools for the OSCAL project☆36Updated 2 years ago
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆65Updated last year
- Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)☆198Updated 4 months ago
- Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on u…☆149Updated last week