aparsons / bag-of-holdingLinks
An application to assist in the organization and prioritization of software security activities.
☆139Updated 4 years ago
Alternatives and similar repositories for bag-of-holding
Users that are interested in bag-of-holding are comparing it to the libraries listed below
Sorting:
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆195Updated 7 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆182Updated 7 years ago
- for AWS Security material☆249Updated 3 years ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆279Updated 2 weeks ago
- Content for 'JIRA Risk Project' book published at LeanPub☆57Updated 7 years ago
- Mittn: Security test tool runner for test automation in CI☆197Updated last year
- A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0☆163Updated 3 weeks ago
- Google Cloud Platform Security Tool☆235Updated 6 years ago
- Content for OWASP Summit 2017 site☆129Updated 5 years ago
- Repo to hold mapping of user-security-stories☆119Updated 7 years ago
- AppSecPipeline Specification for DevOps automation.☆40Updated 3 years ago
- ☆108Updated 2 years ago
- ☆57Updated 5 years ago
- ☆69Updated 5 months ago
- Application Security Automation☆523Updated 2 years ago
- INACTIVE - Security Testing Tool☆107Updated 9 years ago
- ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to www.threadfix.it for up-to-d…☆341Updated 3 years ago
- An open source, online threat modelling tool from OWASP☆484Updated 5 months ago
- A Continuous Threat Modeling methodology☆327Updated 3 years ago
- SeaSponge is an accessible threat modelling tool from Mozilla☆280Updated 7 years ago
- A repository for wardley maps related to security topics.☆46Updated 8 years ago
- Python installable command line utiltity for mitigation of host and key compromises.☆348Updated 4 years ago
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆77Updated 4 years ago
- A very vulnerable serverless application in AWS Lambda☆98Updated 6 years ago
- This repository stores content that can be used to design a Rapid Threat Model Prototyping process for a software development group.☆165Updated 2 years ago
- A Java library for parsing and programmatically using threat models☆82Updated 2 years ago
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated 3 years ago
- SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)☆109Updated 10 months ago
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 9 years ago
- SAMM stands for Software Assurance Maturity Model.☆395Updated 3 years ago