appdefensealliance-dev / ASALinks
App Defense Alliance is now part of the Linux Foundation. The specs listed here are legacy specs part of Google programs. Check out the new Application Security Assessment (ASA) 1.0 specs at the link provided below.
☆80Updated last year
Alternatives and similar repositories for ASA
Users that are interested in ASA are comparing it to the libraries listed below
Sorting:
- OWASP Foundation Web Respository☆28Updated last month
- ☆28Updated 4 months ago
- ☆108Updated last month
- GitHub Actions for MobSF☆25Updated last year
- Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information☆77Updated 2 years ago
- This repo contains the source for the CVE Services API.☆230Updated this week
- CVE Project Documentation☆86Updated 6 months ago
- ☆138Updated this week
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆76Updated 4 years ago
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Updated 6 months ago
- ☆34Updated 3 years ago
- Core model including reused documentation☆101Updated last month
- ☆28Updated last year
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆110Updated 2 years ago
- OWASP Foundation Web Respository☆86Updated 2 months ago
- Software Component Verification Standard (SCVS)☆153Updated 10 months ago
- OpenID Shared Signals Working Group Repository☆72Updated 3 weeks ago
- OWASP Threat Dragon core files☆11Updated last year
- AI featured threat modeling and security review action☆45Updated last year
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆68Updated 7 months ago
- This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given …☆80Updated last year
- ☆124Updated 2 years ago
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Updated last year
- Segment's Threat Modeling training for our engineers☆245Updated 4 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 5 years ago
- A Continuous Threat Modeling methodology☆325Updated 3 years ago
- Desktop variant of OWASP Threat Dragon☆78Updated 4 years ago
- (aka Kotlin Goat) - an intentionally vulnerable Kotlin application☆36Updated last year
- A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0☆163Updated 2 months ago
- OpenSSF Security Tooling Working Group☆320Updated 6 months ago