Alternatives and similar repositories for privado-core

Users that are interested in privado-core are comparing it to the libraries listed below

• clouditor / cloud-property-graph
  The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.
  ☆25Updated 4 months ago
• plume-oss / plume
  Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…
  ☆74Updated 7 months ago
• CROSSINGTUD / CryptoAnalysis
  CogniCrypt_SAST: CrySL-to-Static Analysis Compiler
  ☆75Updated this week
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated last month
• AppThreat / chen
  Code Hierarchy Exploration Net (chen)
  ☆21Updated this week
• ShiftLeftSecurity / overflowdb
  ShiftLeft OverflowDB
  ☆122Updated 2 weeks ago
• secure-software-engineering / tamiflex
  TamiFlex facilitates static analysis of programs that use reflection and custom class loaders
  ☆44Updated 4 years ago
• lyvd / bandit4mal
  A fork of Bandit tool with patterns to identifying malicious python code.
  ☆26Updated 2 years ago
• AppThreat / atom
  atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
  ☆65Updated this week
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆144Updated last year
• secure-software-engineering / COVA
  COVA - A static analysis tool to compute path conditions
  ☆36Updated 2 years ago
• s3c2 / vfcfinder
  VFCFinder: Searching for the Missing Vulnerability Fixing Commits
  ☆29Updated last year
• Fraunhofer-AISEC / codyze
  Codyze is a static analyzer for Java, C, C++ based on code property graphs
  ☆87Updated 4 months ago
• SAP / project-kb
  Home page of project "KB"
  ☆126Updated 2 months ago
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆30Updated 3 months ago
• SWAT-project / SWAT
  SWAT, a dynamic symbolic execution engine for Java Applications that uses ASM for on-the-fly byte code instrumentation.
  ☆32Updated last month
• secure-software-engineering / swan
  Security methods for WeAkNess detection
  ☆20Updated 3 months ago
• fasten-project / fasten
  Analyse package dependency networks at the call graph level
  ☆93Updated last year
• too4words / securibench-micro
  Securibench Micro is a benchmark for static analysis tools for security.
  ☆26Updated 6 years ago
• meta-fun / awesome-software-supply-chain-security
  Sharing software supply chain security open source projects
  ☆50Updated 2 years ago
• CROSSINGTUD / SPDS
  Efficient and Precise Pointer-Tracking Data-Flow Framework
  ☆40Updated 3 years ago
• secure-software-engineering / secucheck
  Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…
  ☆17Updated 4 months ago
• CodeShield-Security / SPDS
  Efficient and Precise Pointer-Tracking Data-Flow Framework
  ☆66Updated 5 months ago
• joernio / flatgraph
  ☆21Updated 2 weeks ago
• TQRG / secbench
  🪐 A Database of Existing Security Vulnerabilities Patches to Enable Evaluation of Techniques (single-commit; multi-language)
  ☆40Updated last month
• quarkslab / aosp_dataset
  Large Commit Precise Vulnerability Dataset based on AOSP CVE
  ☆65Updated 2 years ago
• owenrumney / go-sarif
  Go library for SARIF - Static Analysis Results Interchange Format
  ☆78Updated 2 weeks ago
• trailofbits / codeql-queries
  CodeQL queries developed by Trail of Bits
  ☆99Updated 3 weeks ago
• joernio / query-database
  Default query sets for Joern
  ☆27Updated 3 years ago
• microsoft / codeql-container
  Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
  ☆118Updated last year