The Secure Pipeline Verification Standard (SPVS) is a comprehensive, security-focused framework designed to assess, enhance, and standardize the security maturity of software delivery pipelines across the full lifecycle: Plan, Develop, Integrate, Release, and Operate.
☆79Aug 13, 2026Updated 2 months ago
Alternatives and similar repositories for www-project-spvs
Users that are interested in www-project-spvs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Threat modeling and AI-reasoning vulnerability detection harness for Claude Code — STRIDE + AI + MAESTRO☆95Updated this week
- ADLC Triad governance template for AI agent-assisted development☆23Jun 28, 2026Updated 3 months ago
- This repository offers a detailed taxonomy of existing AI-driven security solutions tailored for DevSecOps, highlighting the current rese…☆20Jul 2, 2025Updated last year
- ☆65Jun 3, 2025Updated last year
- We borrow the concept of 'personas' from UX/service design and apply it to threat actors to improve understanding between security, techn…☆11Jun 17, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A comprehensive framework for analyzing and defending against attacks targeting Software Development Life Cycle Infrastructure.☆182Jul 29, 2026Updated 2 months ago
- Evidence Layer for AI Agent Actions☆18Jun 27, 2026Updated 3 months ago
- Open SAMMY codebase☆29Updated this week
- AWS audits, without screenshots☆45Sep 22, 2026Updated 3 weeks ago
- Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.☆15Jun 5, 2017Updated 9 years ago
- The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured c…☆556Updated this week
- Bloodhound Attack Path Automation in CobaltStrike☆29Jul 31, 2017Updated 9 years ago
- Code that implements Factor Analysis of Information Risk (FAIR) in combination with MITRE ATT&CK using Markov Chain Monte Carlo (via PyMC…☆49Dec 10, 2025Updated 10 months ago
- Labs for Threat Modelling training delivered by ControlPlane☆37Mar 25, 2026Updated 6 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Docker container escape enumeration tool.☆12Jan 23, 2021Updated 5 years ago
- Bot per leggere i livelli idrometrici dei fiumi dell'Emilia Romagna riportati da allertameteo.regione.emilia-romagna.it.☆13Updated this week
- Provides content useful for IriusRisk threat modelling, including templates, API scripts, libraries and more.☆17Apr 20, 2026Updated 5 months ago
- Practical Claude prompts, chains, and simulations for CISOs who want to actually use AI instead of just talk about it.☆25Mar 26, 2026Updated 6 months ago
- The IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility t…☆132Aug 2, 2026Updated 2 months ago
- Scan MSSQL databases for payment card data without relying on key words☆18Apr 10, 2017Updated 9 years ago
- Exploiting Jackson deserialization vulnerability with 3 gadgets☆10May 3, 2021Updated 5 years ago
- ☆68Mar 6, 2022Updated 4 years ago
- Interactive CRQ Monte Carlo simulation tool for quantifying cybersecurity risk using FAIR methodology. Built for EU SMBs, vCISOs, and sec…☆57Aug 19, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A Crowdsourcing Exchange for mapping various sources of security vulnerabilities, exposures, threats, and controls data☆27May 22, 2019Updated 7 years ago
- Assessors Studio operationalizes CycloneDX Attestations (CDXA): perform assessments, collect evidence, make claims, and issue machine-rea…☆17Aug 16, 2026Updated 2 months ago
- A comprehensive framework and assessment toolkit for measuring and improving Cloud Native security maturity across 8 critical business fu…☆10Jun 24, 2025Updated last year
- Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connec…☆298May 12, 2026Updated 5 months ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆110Jan 16, 2024Updated 2 years ago
- ☆13Dec 10, 2023Updated 2 years ago
- ☆167Updated this week
- This contains 100 days of the notes which i have learned with the internship.☆19Dec 1, 2024Updated last year
- Repository for CoSAI Workstream 1, Software Supply Chain Security for AI Systems☆59Oct 1, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Securely store, share, and access secrets alongside the codebase.☆78Sep 27, 2026Updated 3 weeks ago
- AI-powered SAST accelerator built to speed up secure development.☆93Mar 30, 2026Updated 6 months ago
- AIDEFEND MCP is a local-first AI Security Defensive Assistant that brings the full AIDEFEND countermeasure library into your environment …☆18Sep 11, 2026Updated last month
- OWASP Foundation web repository☆51Mar 9, 2026Updated 7 months ago
- ☆196Updated this week
- ZAP scripts to implement ASVS L1 checking☆17Apr 28, 2022Updated 4 years ago
- Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages☆398Updated this week