insidersec / insiderLinks
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆553Updated 3 years ago
Alternatives and similar repositories for insider
Users that are interested in insider are comparing it to the libraries listed below
Sorting:
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆422Updated last year
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆863Updated 2 years ago
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,296Updated this week
- Security Champions Playbook v 2.1☆390Updated 2 years ago
- A starter secure code review checklist☆184Updated 7 years ago
- The DevSecOps toolset for REST APIs☆278Updated 3 years ago
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆150Updated 5 years ago
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆491Updated 2 years ago
- OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.☆357Updated last week
- This project is about creating and publishing threat model examples.☆427Updated 4 years ago
- threatspec - continuous threat modeling, through code☆377Updated 5 years ago
- The Secure Coding Dojo is a platform for delivering secure coding knowledge.☆594Updated 2 months ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆226Updated last year
- Getting a handle on container security☆677Updated 2 years ago
- The Secure Coding Framework☆271Updated 5 years ago
- Repo for all the SKF Docker lab examples☆463Updated last year
- Purposely vulnerable Java application to help lead secure coding workshops☆191Updated last year
- Zap baseline scanner in Docker with authentication☆103Updated last year
- SAMM stands for Software Assurance Maturity Model.☆398Updated 3 years ago
- NextJS-based single-page application for completing and reviewing SAMM assessments☆79Updated 2 years ago
- Performing security tests inside your CI☆588Updated last year
- The ZAP Heads Up Display (HUD)☆273Updated last month
- OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…☆769Updated this week
- ☆196Updated 2 years ago
- a Damn Vulnerable Serverless Application☆544Updated 2 years ago
- Agile Threat Modeling Toolkit☆722Updated 2 months ago
- A Continuous Threat Modeling methodology☆324Updated 3 years ago
- Container Security Verification Standard☆58Updated 6 years ago
- This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory☆884Updated last month
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,072Updated this week