Alternatives and similar repositories for www-project-devsecops-verification-standard

Users that are interested in www-project-devsecops-verification-standard are comparing it to the libraries listed below

• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆64Updated last month
• mihir-shah99 / vxdf
  ☆56Updated 3 weeks ago
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆93Updated last year
• piercing-index / cloud-vulnerabilities
  ☆41Updated 4 months ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 10 months ago
• snyk-labs / github-actions-scanner
  Scans your Github Actions for security issues
  ☆74Updated this week
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆49Updated 2 years ago
• SecurityRunners / cloud-exposure-catalog
  A catalog of services that can be publicly exposed within different cloud providers.
  ☆14Updated 9 months ago
• DataDog / cloud-siem-aws-threat-emulation
  A guide to simplify the process of evaluating Datadog's Cloud SIEM security capabilities to detect AWS threats.
  ☆20Updated last year
• ReversecLabs / cloud-security-vm
  Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments
  ☆141Updated 5 months ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• kubenomicon / kubenomicon
  Offensive Kubernetes Threat Matrix -- kubenomicon.com
  ☆40Updated 5 months ago
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆58Updated last year
• xvnpw / sec-docs
  An experimental project using LLM technology to generate security documentation for Open Source Software (OSS) projects
  ☆30Updated 3 months ago
• luisfontes19 / orgsec-guide
  A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program
  ☆39Updated 3 weeks ago
• PaloAltoNetworks / cobra-tool
  Cloud Offensive Breach and Risk Assessment (COBRA) Tool
  ☆92Updated last month
• ReversecLabs / IceKube
  ☆179Updated 2 months ago
• OWASP / www-project-nightingale
  OWASP Foundation Web Respository
  ☆9Updated this week
• OWASP / www-project-devsecops-guideline
  The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …
  ☆68Updated last year
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆97Updated last year
• Hacking-the-Cloud / htc-ctfs
  Holds the public Hacking the Cloud CTFs.
  ☆56Updated last year
• bvoris / mitreattackthreatmodeling
  This provides a guided step by step walkthrough for threat modeling with MITRE ATT&CK Framework
  ☆28Updated 4 months ago
• Toreon / threat-model-playbook
  ☆88Updated 3 years ago
• avishayil / cdk-goat
  Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
  ☆47Updated last year
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆117Updated last year
• ReversecLabs / cloud-wiki
  A public cloud security knowledgebase - https://www.secwiki.cloud/
  ☆51Updated 7 months ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆184Updated 2 months ago
• OpenSecuritySummit / project-ASVS-User-Stories
  ☆19Updated 3 years ago
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆108Updated 7 months ago
• BishopFox / llm-testing-findings
  LLM Testing Findings Templates
  ☆72Updated last year