Shostack's 4 Question Frame for Threat Modeling
☆214May 29, 2026Updated 5 months ago
Alternatives and similar repositories for 4QuestionFrame
Users that are interested in 4QuestionFrame are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple threat modeling tool to help humans to reduce time-to-value when threat modeling☆794Updated this week
- ☆100Sep 11, 2025Updated last year
- Attack Tree GPT is a C# program that uses Azure's Computer Vision and Azure OpenAI's GPT-4 to generate attack trees for AWS services as w…☆14Jun 19, 2024Updated 2 years ago
- The Elevation of Privilege Threat Modeling Game☆361Jun 20, 2024Updated 2 years ago
- A collection of helper scripts for migrating existing AWS IAM federation into AWS SSO☆13Aug 30, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- OWASP Foundation web repository☆53Oct 13, 2026Updated 3 weeks ago
- Programmable Wallets for Salesforce, powered by Circle Programmable Wallets, is an open source solution built on Circle Programmable Wall…☆12Oct 28, 2025Updated last year
- Threat Modeling Manifesto☆31May 28, 2026Updated 5 months ago
- ☆123Oct 22, 2026Updated 2 weeks ago
- Privacy Cards for Software Developers☆54May 17, 2019Updated 7 years ago
- ☆12Apr 30, 2024Updated 2 years ago
- Yet Another SCA tool☆13Nov 10, 2022Updated 3 years ago
- Structured knowledge and step-by-step guides for AI agents to quickly set up and experiment with Greengrass (Java and Lite) in containeri…☆12Apr 8, 2026Updated 6 months ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆111Jan 16, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated 2 years ago
- This Guidance shows how Amazon Bedrock Data Automation streamlines the generation of valuable insights from unstructured multimodal conte…☆67Mar 25, 2026Updated 7 months ago
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆10May 19, 2025Updated last year
- Provide some tips to handle Injection into application code (OWASP TOP 10 - A1).☆10Nov 11, 2020Updated 5 years ago
- This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.☆679Updated this week
- Puma Prey contains vulnerable .NET target applications to test the Puma Scan rules against. This project contains Web Forms, MVC5, and Co…☆22Oct 5, 2026Updated last month
- POC in order to explore and describe a proposition for the automation of the testing of the authorization matrix.☆13Nov 4, 2017Updated 9 years ago
- Pwning AI Code Interpreters for fun and profit - by Phantom Labs☆28Aug 3, 2026Updated 3 months ago
- Segment's Threat Modeling training for our engineers☆243May 4, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An AWS tool to help you create a point in time assessment of your AWS account using Prowler.☆638Sep 25, 2026Updated last month
- Raptor - Web application firewall [ Stable ]☆15Dec 8, 2016Updated 9 years ago
- This provides a guided step by step walkthrough for threat modeling with MITRE ATT&CK Framework☆30Jan 7, 2026Updated 9 months ago
- Swag for the OWASP projects and chapters☆44Oct 20, 2026Updated 2 weeks ago
- ☆12Apr 7, 2023Updated 3 years ago
- A CLI tool for temporarily escalating GCP IAM privileges to perform high privilege tasks.☆29Mar 15, 2023Updated 3 years ago
- A sample agentic ai platform to run agentic workflows on AWS using either EKS or Bedrock AgentCore with open source frameworks like LangC…☆152Updated this week
- ☆13Aug 25, 2025Updated last year
- These are some of the commands which I use frequently during Malware Analysis and DFIR.☆24Jan 8, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Azure AD Security controls check.☆16Feb 25, 2023Updated 3 years ago
- A cdk8s plugin to validate synthesized k8s manifests☆10Oct 3, 2022Updated 4 years ago
- OWASP Foundation Web Respository☆32Aug 18, 2026Updated 2 months ago
- OWASP Serverless Top 10☆218Jul 6, 2021Updated 5 years ago
- OWASP Foundation Web Respository☆11Oct 9, 2025Updated last year
- Resource types that can be publicly exposed on AWS☆337Feb 23, 2022Updated 4 years ago
- ☆43Aug 27, 2025Updated last year