Alternatives and similar repositories for threadfix:

Users that are interested in threadfix are comparing it to the libraries listed below

• jtmelton / appsensor
  A toolkit for building self-defending applications through real-time event detection and response
  ☆280Updated 2 years ago
• mozilla / seasponge
  SeaSponge is an accessible threat modelling tool from Mozilla
  ☆278Updated 6 years ago
• thesp0nge / owasp-orizon
  Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.
  ☆144Updated 7 years ago
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆190Updated 6 years ago
• vulndb / data
  User, contributor and developer friendly vulnerability database
  ☆129Updated 6 years ago
• mike-goodwin / owasp-threat-dragon
  An open source, online threat modelling tool from OWASP
  ☆483Updated 7 months ago
• OWASP / owasp-summit-2017
  Content for OWASP Summit 2017 site
  ☆128Updated 4 years ago
• johndekroon / serializekiller
  Mass scanner for the Java serialize bug
  ☆151Updated 5 years ago
• aparsons / bag-of-holding
  An application to assist in the organization and prioritization of software security activities.
  ☆137Updated 3 years ago
• salesforce / vulnreport
  Open-source pentesting management and automation platform by Salesforce Product Security
  ☆594Updated 2 years ago
• stevespringett / threatmodel-sdk
  A Java library for parsing and programmatically using threat models
  ☆79Updated last year
• WithSecureOpenSource / mittn
  Mittn: Security test tool runner for test automation in CI
  ☆195Updated last year
• fastly / ftw
  Framework for Testing WAFs (FTW!)
  ☆264Updated last year
• sethlaw / sputr
  Security Payload Unit Test Repository (SPUTR)
  ☆86Updated last year
• openstack-archive / syntribos
  Python API security testing tool from OpenStack Security Group
  ☆277Updated 4 years ago
• mozilla / Garmr
  INACTIVE - Security Testing Tool
  ☆106Updated 8 years ago
• spoofzu / DeepViolet
  Tool for introspection of SSL\TLS sessions
  ☆138Updated last month
• h3xstream / burp-retire-js
  Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
  ☆201Updated 7 months ago
• honeynet / beeswarm
  Honeypot deployment made easy
  ☆235Updated 5 years ago
• SecurityRAT / SecurityRAT
  OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
  ☆175Updated last month
• victims / victims-cve-db
  CVE database store
  ☆129Updated 4 years ago
• foospidy / GrepBugs
  A regex based source code scanner.
  ☆129Updated 7 years ago
• NetsOSS / headless-burp
  Automate security tests using Burp Suite.
  ☆224Updated 7 months ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆937Updated 3 years ago
• lightbulb-framework / lightbulb-framework
  Tools for auditing WAFS
  ☆457Updated 4 years ago
• codedx / codepulse
  Code Pulse is a real-time code coverage tool for penetration testing activities
  ☆119Updated 2 years ago
• OWASP / samm
  SAMM stands for Software Assurance Maturity Model.
  ☆398Updated 2 years ago
• tomsteele / burpbuddy
  burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any langu…
  ☆157Updated 6 years ago
• OWASP / user-security-stories
  Repo to hold mapping of user-security-stories
  ☆114Updated 6 years ago
• adulau / cve-search
  cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilit…
  ☆140Updated 3 weeks ago