insidersec / insiderLinks
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆540Updated 3 years ago
Alternatives and similar repositories for insider
Users that are interested in insider are comparing it to the libraries listed below
Sorting:
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆846Updated last year
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆148Updated 4 years ago
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆405Updated 7 months ago
- The DevSecOps toolset for REST APIs☆272Updated 2 years ago
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆476Updated 2 years ago
- Security Champions Playbook v 2.1☆372Updated last year
- A starter secure code review checklist☆182Updated 6 years ago
- Getting a handle on container security☆658Updated last year
- The Secure Coding Framework☆266Updated 4 years ago
- This project is about creating and publishing threat model examples.☆418Updated 3 years ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆728Updated 10 months ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆222Updated last year
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,237Updated 3 weeks ago
- ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.☆691Updated last year
- a Damn Vulnerable Serverless Application☆541Updated last year
- NextJS-based single-page application for completing and reviewing SAMM assessments☆74Updated 2 years ago
- Application Security Automation☆528Updated last year
- threatspec - continuous threat modeling, through code☆360Updated 4 years ago
- OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.☆170Updated 5 months ago
- Repo for all the SKF Docker lab examples☆453Updated 11 months ago
- OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for …☆1,134Updated 3 weeks ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆282Updated 3 weeks ago
- ☆188Updated 2 years ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆108Updated last year
- SAMM stands for Software Assurance Maturity Model.☆397Updated 3 years ago
- A simple web app that helps developers understand the ASVS requirements.☆158Updated 4 months ago
- OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.☆330Updated 7 months ago
- API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities☆399Updated 7 years ago
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆928Updated this week
- Agile Threat Modeling Toolkit☆678Updated 2 weeks ago