The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
☆110Jan 16, 2024Updated 2 years ago
Alternatives and similar repositories for security-champion-framework
Users that are interested in security-champion-framework are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Security Champions Playbook v 2.1☆392Sep 25, 2023Updated 2 years ago
- ☆20Jan 12, 2022Updated 4 years ago
- OWASP Foundation Web Respository☆15Oct 9, 2025Updated 5 months ago
- threatspec - continuous threat modeling, through code☆383Dec 30, 2020Updated 5 years ago
- A Security Scanner for Go☆26Feb 11, 2019Updated 7 years ago
- ☆22Jan 6, 2022Updated 4 years ago
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆54Mar 4, 2026Updated 2 weeks ago
- A documentation and tracking project with the goal of making package management systems more secure.☆51Mar 5, 2021Updated 5 years ago
- Segment's Threat Modeling training for our engineers☆245May 4, 2021Updated 4 years ago
- ☆125Nov 8, 2023Updated 2 years ago
- A collection of DevSecOps reference architectures☆71Feb 7, 2021Updated 5 years ago
- Yet Another SCA tool☆13Nov 10, 2022Updated 3 years ago
- OWASP Foundation web repository☆35Mar 16, 2026Updated last week
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated last year
- A Continuous Threat Modeling methodology☆324Jun 24, 2022Updated 3 years ago
- ☆12Aug 5, 2023Updated 2 years ago
- Documenting your Threat Models with HCL☆454Updated this week
- ☆44Oct 16, 2025Updated 5 months ago
- ☆569Updated this week
- Agile Threat Modeling as Code☆13Jun 30, 2022Updated 3 years ago
- My set of notes and resources for Microsoft and other exams☆15Oct 20, 2021Updated 4 years ago
- OWASP Foundation Web Respository☆28Dec 22, 2025Updated 3 months ago
- Threat matrix for CI/CD Pipeline☆759Jul 8, 2024Updated last year
- OWASP Foundation Web Respository☆28Dec 5, 2025Updated 3 months ago
- ARCHIVED - Tool to perform security check on dependencies embedded in given Go binary☆11Nov 26, 2024Updated last year
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆108Jan 11, 2023Updated 3 years ago
- Enable Falco to read audit logs from EKS☆11Dec 13, 2020Updated 5 years ago
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,724Aug 2, 2024Updated last year
- A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform☆11Dec 20, 2021Updated 4 years ago
- InfoSec OpenAI Examples☆19Nov 26, 2023Updated 2 years ago
- ☆18Sep 13, 2021Updated 4 years ago
- This project is about creating and publishing threat model examples.☆429Nov 10, 2021Updated 4 years ago
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆1,042Jan 5, 2026Updated 2 months ago
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Jul 9, 2025Updated 8 months ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆181Dec 11, 2025Updated 3 months ago
- Threat Modeling Manifesto☆30Jul 18, 2024Updated last year
- OWASP Foundation Web Respository☆22Oct 9, 2025Updated 5 months ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆182Dec 7, 2018Updated 7 years ago
- We borrow the concept of 'personas' from UX/service design and apply it to threat actors to improve understanding between security, techn…☆11Jun 17, 2020Updated 5 years ago