Alternatives and similar repositories for threadfix

Users that are interested in threadfix are comparing it to the libraries listed below

• mozilla / seasponge
  SeaSponge is an accessible threat modelling tool from Mozilla
  ☆278Updated 7 years ago
• mike-goodwin / owasp-threat-dragon
  An open source, online threat modelling tool from OWASP
  ☆484Updated 11 months ago
• thesp0nge / owasp-orizon
  Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.
  ☆144Updated 8 years ago
• jtmelton / appsensor
  A toolkit for building self-defending applications through real-time event detection and response
  ☆280Updated 2 years ago
• vulndb / data
  User, contributor and developer friendly vulnerability database
  ☆128Updated 6 years ago
• WithSecureOpenSource / mittn
  Mittn: Security test tool runner for test automation in CI
  ☆195Updated last year
• aparsons / bag-of-holding
  An application to assist in the organization and prioritization of software security activities.
  ☆139Updated 3 years ago
• salesforce / vulnreport
  Open-source pentesting management and automation platform by Salesforce Product Security
  ☆597Updated 3 years ago
• johndekroon / serializekiller
  Mass scanner for the Java serialize bug
  ☆151Updated 6 years ago
• tomsteele / burpbuddy
  burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any langu…
  ☆157Updated 6 years ago
• fastly / ftw
  Framework for Testing WAFs (FTW!)
  ☆266Updated 2 years ago
• lightbulb-framework / lightbulb-framework
  Tools for auditing WAFS
  ☆460Updated 4 years ago
• KvasirSecurity / Kvasir
  Kvasir: Penetration Test Data Management
  ☆428Updated 6 years ago
• mozilla / minion
  Minion
  ☆354Updated 6 years ago
• seccubus / seccubus
  Easy automated vulnerability scanning, reporting and analysis
  ☆702Updated 5 years ago
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆194Updated 6 years ago
• stevespringett / threatmodel-sdk
  A Java library for parsing and programmatically using threat models
  ☆79Updated 2 years ago
• adulau / cve-search
  cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilit…
  ☆143Updated last week
• scovetta / yasca
  Yet Another Source Code Analyzer
  ☆184Updated 3 years ago
• dradis / dradis-legacy
  This is a LEGACY repo head to
  ☆134Updated last year
• olacabs / jackhammer
  Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
  ☆733Updated last year
• honeynet / beeswarm
  Honeypot deployment made easy
  ☆236Updated 6 years ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆943Updated 4 years ago
• victims / victims-cve-db
  CVE database store
  ☆132Updated 4 years ago
• foospidy / DbDat
  Db Database Assessment Tool
  ☆209Updated 6 years ago
• foospidy / GrepBugs
  A regex based source code scanner.
  ☆129Updated 8 years ago
• Contrast-Security-OSS / contrast-rO0
  A tiny Java agent that blocks attacks against unsafe deserialization
  ☆84Updated 7 years ago
• Tripwire / TARDIS
  Threat Analysis, Reconnaissance, and Data Intelligence System
  ☆125Updated 9 years ago
• ChrisRimondi / VulntoES
  Vulnerability Data in ES
  ☆146Updated 7 years ago
• siberas / watobo
  ☆90Updated 4 months ago