apiiro / malicious-code-rulesetLinks
Focused malicious code detection ruleset, with a high protection-to-noise ratio
β128Updated 7 months ago
Alternatives and similar repositories for malicious-code-ruleset
Users that are interested in malicious-code-ruleset are comparing it to the libraries listed below
Sorting:
- boostsecurityio/lotpβ134Updated 5 months ago
- π§ͺ Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.β41Updated 9 months ago
- β113Updated 2 years ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,β¦β137Updated last year
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projectsβ92Updated last month
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or artβ¦β52Updated this week
- β86Updated 8 months ago
- A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP seβ¦β98Updated 3 weeks ago
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Pβ¦β133Updated 3 months ago
- An experimental project using LLM technology to generate security documentation for Open Source Software (OSS) projectsβ34Updated 7 months ago
- Create notes during a security code review in VSCode π Import your favorite SAST tool findings π οΈ and collaborate with others π€β137Updated 6 months ago
- A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity programβ43Updated last week
- Enriching the NVD CVSS scores to include Temporal & Threat Metricsβ209Updated this week
- Manager of third-party sources of Semgrep rules πβ88Updated last year
- A tool for preventing the installation of malicious npm and PyPI packagesβ165Updated this week
- Semgrep-based Policy Controller for Kubernetesβ47Updated 6 months ago
- β190Updated 5 months ago
- Gram is Klarna's own threat model diagramming toolβ325Updated 2 months ago
- Build a CVE library with aggregated CISA, EPSS and CVSS dataβ29Updated 2 years ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive filesβ226Updated 3 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagramsβ105Updated 8 months ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. β¦β66Updated 3 months ago
- RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs andβ¦β153Updated 10 months ago
- A project to visualize the software supply chainβ53Updated 2 years ago
- Data about all known supply-chain attacks through historyβ60Updated 4 months ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and versβ¦β129Updated last month
- A full insecure kubernetes application for testing security toolsβ89Updated 5 months ago
- boostsecurityio/poutineβ332Updated last week
- LLM Testing Findings Templatesβ73Updated last year
- AI featured threat modeling and security review actionβ44Updated 10 months ago