Alternatives and similar repositories for insider:

Users that are interested in insider are comparing it to the libraries listed below

• AppThreat / sast-scan
  Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…
  ☆147Updated 4 years ago
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆383Updated 2 months ago
• OWASP / threat-model-cookbook
  This project is about creating and publishing threat model examples.
  ☆412Updated 3 years ago
• c0rdis / security-champions-playbook
  Security Champions Playbook v 2.1
  ☆356Updated last year
• globocom / huskyCI
  Performing security tests inside your CI
  ☆578Updated 8 months ago
• imperva / automatic-api-attack-tool
  Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…
  ☆463Updated last year
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆822Updated last year
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆340Updated 4 years ago
• ZupIT / horusec
  Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
  ☆1,160Updated this week
• semgrep / semgrep-rules
  Semgrep rules registry
  ☆830Updated this week
• softwaresecured / secure-code-review-checklist
  A starter secure code review checklist
  ☆179Updated 6 years ago
• MobSF / mobsfscan
  mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swif…
  ☆627Updated 2 months ago
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆313Updated 2 years ago
• Threagile / threagile
  Agile Threat Modeling Toolkit
  ☆635Updated 3 weeks ago
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆272Updated 2 years ago
• OWASP / samm
  SAMM stands for Software Assurance Maturity Model.
  ☆398Updated 2 years ago
• koenbuyens / Vulnerable-OAuth-2.0-Applications
  vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.
  ☆307Updated 9 months ago
• OWASP / RiskAssessmentFramework
  The Secure Coding Framework
  ☆265Updated 4 years ago
• Skyscanner / whispers
  Identify hardcoded secrets in static structured text
  ☆479Updated last year
• OWASP / ASST
  OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
  ☆163Updated 10 months ago
• auth0 / repo-supervisor
  Scan your code for security misconfiguration, search for passwords and secrets.
  ☆639Updated last year
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆122Updated last year
• michelin / ChopChop
  ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.
  ☆681Updated last year
• OWASP / pytm
  A Pythonic framework for threat modeling
  ☆943Updated 3 weeks ago
• tcosolutions / betterscan
  Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan
  ☆838Updated this week
• SasanLabs / VulnerableApp
  OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.
  ☆303Updated 2 months ago
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆275Updated 3 weeks ago
• dsopas / MindAPI
  Organize your API security assessment by using MindAPI. It's free and open for community collaboration.
  ☆829Updated this week
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆137Updated 9 months ago