Alternatives and similar repositories for cwe-tool:

Users that are interested in cwe-tool are comparing it to the libraries listed below

• OWASP / cwe-sdk-javascript
  A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC
  ☆33Updated last week
• OWASP / www-project-integration-standards
  OWASP Foundation Web Respository
  ☆27Updated 4 months ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆92Updated 10 months ago
• ajinabraham / libsast
  Generic SAST Library
  ☆126Updated 2 months ago
• OpenSecuritySummit / oss-website
  The Open Security Summit is focused on the collaboration between, Developers and Application Security
  ☆45Updated last month
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆49Updated this week
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆103Updated 3 weeks ago
• snyk-labs / snync
  Mitigate security concerns of Dependency Confusion supply chain security risks
  ☆45Updated 2 years ago
• OWASP / OpenCRE
  ☆90Updated last month
• apiiro / combobulator
  Dependency Combobulator
  ☆89Updated last year
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆141Updated 10 months ago
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆59Updated 6 months ago
• zapbot / zap-mgmt-scripts
  ZAP Management Scripts
  ☆21Updated last week
• LuizBoina / dragon-gpt
  Dragon-GPT uses Chat-GPT, or local LLM, to execute automatic and AI-powered threat modeling analysis on a given OWASP Threat Dragon diagr…
  ☆32Updated last year
• Vulnogram / Vulnogram
  Vulnogram is a tool for creating and editing CVE information in CVE JSON format
  ☆166Updated this week
• Threagile / run-threagile-action
  GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file
  ☆13Updated 8 months ago
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆36Updated 3 years ago
• semgrep / semgrep-docs
  Documentation of Semgrep: a fast, open-source, static analysis tool.
  ☆38Updated this week
• we45 / orchestron-community
  Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…
  ☆31Updated 2 years ago
• vfeedio / pyvfeed
  Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions
  ☆99Updated last year
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆40Updated last year
• RedHatProductSecurity / cvelib
  A Python library and command line interface for CVE Services.
  ☆61Updated last month
• secureCodeBox / secureCodeBox-v2
  This Repository contains the stable beta preview of the next major secureCodeBox (SCB) release v2.0.0.
  ☆24Updated 4 years ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆137Updated 9 months ago
• OWASP / www-project-kubernetes-security-testing-guide
  OWASP Kubernetes Security Testing Guide
  ☆37Updated 4 months ago
• OWASP / threat-dragon-desktop
  Desktop variant of OWASP Threat Dragon
  ☆77Updated 3 years ago
• fabric8-analytics / cvedb
  CVE database
  ☆22Updated 4 years ago
• OWASP / www-project-vulnerability-management-guide
  OWASP Foundation Web Respository
  ☆28Updated 2 years ago
• cr0hn / dockerfile-security
  Static security checker for Dockerfiles
  ☆93Updated 9 months ago