Alternatives and similar repositories for insider:

Users that are interested in insider are comparing it to the libraries listed below

• ZupIT / horusec
  Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
  ☆1,210Updated last week
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆838Updated last year
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆398Updated 5 months ago
• AppThreat / sast-scan
  Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…
  ☆148Updated 4 years ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆354Updated 4 years ago
• imperva / automatic-api-attack-tool
  Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…
  ☆472Updated last year
• c0rdis / security-champions-playbook
  Security Champions Playbook v 2.1
  ☆365Updated last year
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆274Updated 2 years ago
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆318Updated 2 years ago
• ScaleSec / vulnado
  Purposely vulnerable Java application to help lead secure coding workshops
  ☆179Updated 10 months ago
• devops-kung-fu / bomber
  Scans Software Bill of Materials (SBOMs) for security vulnerabilities
  ☆563Updated 3 weeks ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆123Updated last year
• OWASP / samm
  SAMM stands for Software Assurance Maturity Model.
  ☆398Updated 2 years ago
• softwaresecured / secure-code-review-checklist
  A starter secure code review checklist
  ☆182Updated 6 years ago
• semgrep / semgrep-rules
  Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
  ☆899Updated this week
• tcosolutions / betterscan
  Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan
  ☆859Updated last month
• OWASP / threat-model-cookbook
  This project is about creating and publishing threat model examples.
  ☆419Updated 3 years ago
• erev0s / VAmPI
  Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
  ☆981Updated 5 months ago
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆524Updated this week
• OWASP / RiskAssessmentFramework
  The Secure Coding Framework
  ☆268Updated 4 years ago
• OWASP / ASST
  OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
  ☆168Updated 3 months ago
• Fuzzapi / API-fuzzer
  API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
  ☆393Updated 7 years ago
• michenriksen / drawio-threatmodeling
  Draw.io libraries for threat modeling diagrams
  ☆741Updated 4 years ago
• owaspsamm / sammwise
  NextJS-based single-page application for completing and reviewing SAMM assessments
  ☆72Updated 2 years ago
• OWASP / pytm
  A Pythonic framework for threat modeling
  ☆988Updated 2 months ago
• OWASP / glue
  Application Security Automation
  ☆529Updated last year
• mike-goodwin / owasp-threat-dragon
  An open source, online threat modelling tool from OWASP
  ☆483Updated 9 months ago
• OWASP / OWASP-VWAD
  This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory
  ☆880Updated 6 months ago
• auth0 / repo-supervisor
  Scan your code for security misconfiguration, search for passwords and secrets.
  ☆644Updated last year
• OWASP / Docker-Security
  Getting a handle on container security
  ☆650Updated last year