OWASP / ASST
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
☆160Updated 8 months ago
Related projects ⓘ
Alternatives and complementary repositories for ASST
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆151Updated 3 years ago
- An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.☆180Updated this week
- Software Component Verification Standard (SCVS)☆135Updated 7 months ago
- The DevSecOps toolset for REST APIs☆271Updated last year
- VMC: a Scalable, Open Source and Free Vulnerability Management Platform☆82Updated last month
- The Secure Coding Framework☆262Updated 4 years ago
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project…☆107Updated 8 months ago
- CLI component of OWASP PurpleTeam☆124Updated 11 months ago
- Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…☆120Updated 7 months ago
- Sample scan files for testing DefectDojo imports☆75Updated 3 weeks ago
- ☆121Updated last year
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆55Updated 4 months ago
- PatrowlHears - Vulnerability Intelligence Center / Exploits☆159Updated this week
- Desktop variant of OWASP Threat Dragon☆77Updated 3 years ago
- CVSS (Common Vulnerability Scoring System) v3.1 Javascript calculator toolkit☆59Updated 2 months ago
- The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)☆290Updated last year
- ☆80Updated 7 months ago
- Static security checker for Dockerfiles☆92Updated 8 months ago
- OWASP Foundation Project Web Repository for Secure Coding Practices Quick-reference Guide☆64Updated 5 months ago
- Static code analysis tool based on Elasticsearch☆129Updated 3 years ago
- Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch …☆161Updated 5 months ago
- Python API library for DefectDojo☆40Updated last year
- OWASP Foundation Web Respository☆128Updated last week
- The source of ZAP website☆64Updated this week
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆274Updated this week
- OWASP Foundation Threat Dragon Project Web Repository☆73Updated this week
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆244Updated 2 weeks ago
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆61Updated 5 months ago
- One way to continuously monitor sensitive information that could be exposed on Github☆175Updated 4 years ago
- A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs☆52Updated last year