Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆554Apr 10, 2022Updated 4 years ago
Alternatives and similar repositories for insider
Users that are interested in insider are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Official Github Action for Insider☆13Jan 7, 2023Updated 3 years ago
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆883Sep 1, 2023Updated 3 years ago
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,347Updated this week
- [W.I.P] An ecosystem of crawlers for detecting: leaks, sensitive data exposure and attempts exfiltration of data☆33Sep 21, 2026Updated 3 weeks ago
- HTTP fuzzer engine security oriented☆61Aug 10, 2026Updated 2 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Django application that performs SAST and Malware Analysis for Android APKs☆228Oct 8, 2026Updated last week
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆457Sep 21, 2026Updated 3 weeks ago
- Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.☆2,759Updated this week
- APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is int…☆986Sep 24, 2026Updated 3 weeks ago
- Oversecured Vulnerable Android App☆764Oct 6, 2026Updated last week
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆17,101Updated this week
- The extension of Burp Suite for Conviso Platform aims to serve as an integration between them, making the life of an analyst easier, beca…☆36Mar 11, 2026Updated 7 months ago
- The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala proje…☆2,450Mar 26, 2026Updated 6 months ago
- Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime☆3,121Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.☆2,477Jun 11, 2025Updated last year
- nodejsscan is a static security code scanner for Node.js applications.☆2,576Sep 21, 2026Updated 3 weeks ago
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,276Updated this week
- threatspec - continuous threat modeling, through code☆389Dec 30, 2020Updated 5 years ago
- Application Security Automation☆526Sep 5, 2023Updated 3 years ago
- Some of my past public researches are archived here☆21Updated this week
- Custom semgrep rules registry☆14Aug 23, 2022Updated 4 years ago
- Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.☆543Jan 6, 2023Updated 3 years ago
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆625Feb 10, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Este repositorio é apenas um exemplo de como adicionar OWASP ZAP Actions em uma pipeline de DevOps.☆19Mar 12, 2021Updated 5 years ago
- OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependen…☆7,736Updated this week
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆149Sep 4, 2020Updated 6 years ago
- All kind of frida stuff when needed in pentesting or reverse engineering of an android app - The perfect starter kit☆18Jun 2, 2020Updated 6 years ago
- Open-Source Unified Vulnerability Management, DevSecOps & ASPM☆5,009Updated this week
- Generic SAST Library☆139Oct 1, 2026Updated 2 weeks ago
- Burp Suite Extension to monitor new scope☆16Mar 31, 2021Updated 5 years ago
- A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.☆762Jun 25, 2021Updated 5 years ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆282Feb 17, 2026Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A collection of custom security tools for quick needs.☆3,338Oct 7, 2026Updated last week
- Multi-Cloud Security Auditing Tool☆7,853Sep 23, 2025Updated last year
- ☆19Feb 11, 2026Updated 8 months ago
- A curated list of amazingly awesome Burp Extensions☆3,447Aug 15, 2026Updated 2 months ago
- Framework for rapid development of offensive security tools☆118Updated this week
- ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The foc…☆14,843Updated this week
- mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swif…☆792Sep 21, 2026Updated 3 weeks ago