The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use in this matter. Also, the project is trying to help us promote the shift-left security culture in our development process.
☆89Dec 22, 2025Updated 9 months ago
Alternatives and similar repositories for www-project-devsecops-guideline
Users that are interested in www-project-devsecops-guideline are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OWASP Foundation Web Respository☆61Oct 4, 2025Updated 11 months ago
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆1,116Updated this week
- OWASP Foundation Web Respository☆23Oct 9, 2025Updated 11 months ago
- OWASP Foundation Web Respository☆60Aug 1, 2026Updated last month
- OWASP Kubernetes Security Testing Guide☆44Dec 22, 2025Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- pinata-csrf-tool☆13Dec 20, 2019Updated 6 years ago
- ☆26May 22, 2026Updated 4 months ago
- ☆588Updated this week
- Lesson repository for Github Actions Deep Dive (1074)☆24Aug 8, 2024Updated 2 years ago
- Software Component Verification Standard (SCVS)☆170Apr 1, 2025Updated last year
- Exploring Kubernetes Beyond the Certification Topics☆14Jan 22, 2021Updated 5 years ago
- Tools to measure the maturity of Enterprise Security Architecture processes☆13Sep 22, 2017Updated 9 years ago
- A self assessment tool to help understand your level in the SANS Vulnerability Management Maturity Model (VMMM).☆54Apr 2, 2026Updated 5 months ago
- AWS container security survey 2020☆11Dec 2, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆73Jun 25, 2025Updated last year
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆54Mar 4, 2026Updated 6 months ago
- SideKEK library - inexpensive means to protect cryptographic master keys (key encryption keys, KEKs) in a way that is resistant to some o…☆23Jun 26, 2020Updated 6 years ago
- 🦄 A frameworkless API in Node.js☆12Mar 14, 2019Updated 7 years ago
- Templates for the Microsoft Threat Modeling Tool☆183May 7, 2026Updated 4 months ago
- ☆32Jun 19, 2023Updated 3 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆177Dec 7, 2018Updated 7 years ago
- Getting a handle on container security☆689Dec 4, 2023Updated 2 years ago
- Carving tool based in Radare2 & Yara☆17Oct 30, 2018Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how commo…☆48May 9, 2023Updated 3 years ago
- A generic helm chart that enables you to build pretty much any webservice with a worker, or type of database to associate with in a clean…☆12Mar 28, 2023Updated 3 years ago
- Burp Extension to manipulate AES encrypted payloads☆13Feb 4, 2022Updated 4 years ago
- ☆11Nov 28, 2020Updated 5 years ago
- Provision AWS infrastructure using Terraform (By HashiCorp): an example of web application logging customer data☆12Dec 19, 2025Updated 9 months ago
- Microservice Architecture - Spring Boot + Docker + Netflix Libraries☆14Oct 14, 2017Updated 8 years ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,814Aug 2, 2024Updated 2 years ago
- OWASP Foundation Web Respository☆16Oct 9, 2025Updated 11 months ago
- OWASP ThreatAtlas is a collaborative platform for community-driven threat modeling.☆119Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- German OWASP Day conference site & presentation archive☆24Updated this week
- OWASP Foundation Web Respository☆16Oct 4, 2025Updated 11 months ago
- SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)☆110Jan 29, 2025Updated last year
- OWASP Foundation Project Web Repository for Secure Coding Practices Quick-reference Guide☆76May 22, 2024Updated 2 years ago
- A simple scavenger hunt to learn about pentesting a website or web application.☆17Feb 12, 2026Updated 7 months ago
- Curating the best DevSecOps resources and tooling.☆1,737Aug 2, 2024Updated 2 years ago
- VULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security☆31Apr 14, 2023Updated 3 years ago