The source files and tools needed to build the OWASP Cornucopia decks in various languages
☆150Oct 13, 2026Updated this week
Alternatives and similar repositories for cornucopia
Users that are interested in cornucopia are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆41Mar 8, 2022Updated 4 years ago
- InfoSec OpenAI Examples☆19Nov 26, 2023Updated 2 years ago
- OWASP Foundation Web Respository☆30Dec 22, 2025Updated 9 months ago
- OWASP Certified Secure-Software Developer☆43Sep 24, 2026Updated 3 weeks ago
- Cumulus. Threat modeling the Clouds.☆31Oct 6, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- OWASP Foundation web repository☆53Updated this week
- The Secure Pipeline Verification Standard (SPVS) is a comprehensive, security-focused framework designed to assess, enhance, and standard…☆79Aug 13, 2026Updated 2 months ago
- ☆196Updated this week
- The VulnCheck Github Action☆18Oct 5, 2026Updated last week
- A low-cost approach to testing AI chat experiences and security concepts☆41May 30, 2026Updated 4 months ago
- Fork Threat Modeling Platform - Community☆30Oct 1, 2026Updated 2 weeks ago
- A collection of utilities to help with analysis on the command line.☆18Aug 9, 2024Updated 2 years ago
- The security workflow engine!☆142Nov 20, 2025Updated 10 months ago
- ☆20May 18, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Pulled out Linux kernel code to run in userland so they could be targeted by AFL and KLEE☆20Jan 29, 2020Updated 6 years ago
- OWASP Project Developer Guide - Document and Project Web pages☆119Sep 30, 2026Updated 2 weeks ago
- ☆37Jun 20, 2025Updated last year
- The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured c…☆556Updated this week
- threatspec - continuous threat modeling, through code☆389Dec 30, 2020Updated 5 years ago
- This repository stores content that can be used to design a Rapid Threat Model Prototyping process for a software development group.☆163Mar 14, 2023Updated 3 years ago
- Measure release insights and recommendations for open-source dependencies. Note: this project is archived.☆10Jan 3, 2023Updated 3 years ago
- Heimdall Lite 2.0 is a JavaScript based security results viewer and review tool supporting multiple security results formats, such as: In…☆21Feb 11, 2022Updated 4 years ago
- OWASP Findings Format☆19Mar 4, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Continuous Threat Modeling methodology☆329Jun 24, 2022Updated 4 years ago
- OWASP Ontology-driven Threat Modelling framework☆45Jul 11, 2023Updated 3 years ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆190Dec 11, 2025Updated 10 months ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆110Jan 16, 2024Updated 2 years ago
- ☆42Jul 23, 2025Updated last year
- Software Component Verification Standard (SCVS)☆171Apr 1, 2025Updated last year
- This directory focuses exclusively on Threat Modeling Tools—software, code, libraries, or services that automate, guide, or support the d…☆26May 2, 2026Updated 5 months ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 7 months ago
- InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 7, against DISA's Red Hat Enterprise Linux 7 Security Tec…☆15Dec 15, 2025Updated 10 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Interactive CRQ Monte Carlo simulation tool for quantifying cybersecurity risk using FAIR methodology. Built for EU SMBs, vCISOs, and sec…☆57Aug 19, 2026Updated last month
- SonarQube plugin for identifying hardcoded secrets, such as passwords, API keys, AWS credentials, etc..☆105Dec 1, 2023Updated 2 years ago
- Compile an API, an MCP server, a database or a web page into a CLI your agent can run. Ten engines, one output contract, 4.1x less contex…☆24Sep 8, 2026Updated last month
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated 2 years ago
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆54Mar 4, 2026Updated 7 months ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆120Oct 8, 2026Updated last week
- Documenting your Threat Models with HCL☆465Oct 11, 2026Updated last week