Alternatives and similar repositories for cwe-tool:

Users that are interested in cwe-tool are comparing it to the libraries listed below

• OWASP / cwe-sdk-javascript
  A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC
  ☆33Updated last month
• vfeedio / pyvfeed
  Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions
  ☆99Updated last year
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆141Updated 11 months ago
• apiiro / combobulator
  Dependency Combobulator
  ☆89Updated last year
• DefectDojo / defectdojo_api
  Python API library for DefectDojo
  ☆41Updated last year
• OpenSecuritySummit / oss-website
  The Open Security Summit is focused on the collaboration between, Developers and Application Security
  ☆45Updated 2 months ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆93Updated 11 months ago
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆49Updated last week
• DefectDojo / Burp-Plugin
  A Burp plugin to export findings to DefectDojo
  ☆30Updated last year
• mal-lang / exampleLang
  A MAL language that demonstrates the Maven project structure
  ☆23Updated 3 years ago
• we45 / orchestron-community
  Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…
  ☆31Updated 2 years ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆105Updated this week
• DefectDojo / Community-Contribs
  DefectDojo Community Content
  ☆17Updated 4 months ago
• IQTLabs / software-supply-chain-compromises
  A dataset of software supply chain compromises. Please help us maintain it!
  ☆127Updated 2 years ago
• OWASP / www-project-integration-standards
  OWASP Foundation Web Respository
  ☆27Updated 5 months ago
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆36Updated 3 years ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆140Updated 10 months ago
• OWASP / threat-dragon-desktop
  Desktop variant of OWASP Threat Dragon
  ☆77Updated 3 years ago
• devsecops / raindance
  Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
  ☆48Updated 8 years ago
• appsecco / owasp-threat-dragon-gitlab
  OWASP Threat Dragon with Gitlab Integration
  ☆25Updated 7 years ago
• kerberosmansour / InfoSecOpenAIExamples
  InfoSec OpenAI Examples
  ☆19Updated last year
• OWASP / www-project-vulnerability-management-guide
  OWASP Foundation Web Respository
  ☆28Updated 2 years ago
• zapbot / zap-mgmt-scripts
  ZAP Management Scripts
  ☆22Updated this week
• COVAIL / MITRE_NIST
  A Crowdsourcing Exchange for mapping various sources of security vulnerabilities, exposures, threats, and controls data
  ☆26Updated 5 years ago
• Vulnogram / Vulnogram
  Vulnogram is a tool for creating and editing CVE information in CVE JSON format
  ☆170Updated last month
• Threagile / run-threagile-action
  GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file
  ☆13Updated 9 months ago
• faloker / purify
  All-in-one tool for managing vulnerability reports from AppSec pipelines
  ☆105Updated 2 years ago
• ajinabraham / libsast
  Generic SAST Library
  ☆127Updated 3 months ago
• OWASP / kstg
  Kubernetes Security Testing Guide
  ☆26Updated 9 months ago
• cr0hn / dockerfile-security
  Static security checker for Dockerfiles
  ☆93Updated 11 months ago