Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆554Apr 10, 2022Updated 4 years ago
Alternatives and similar repositories for insider
Users that are interested in insider are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Official Github Action for Insider☆13Jan 7, 2023Updated 3 years ago
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,344Updated this week
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆883Sep 1, 2023Updated 3 years ago
- [W.I.P] An ecosystem of crawlers for detecting: leaks, sensitive data exposure and attempts exfiltration of data☆33Oct 26, 2026Updated last week
- Django application that performs SAST and Malware Analysis for Android APKs☆230Oct 31, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆458Oct 27, 2026Updated last week
- Oversecured Vulnerable Android App☆766Oct 6, 2026Updated last month
- Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.☆2,784Updated this week
- Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime☆3,142Oct 12, 2026Updated 3 weeks ago
- APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is int…☆992Sep 24, 2026Updated last month
- The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala proje…☆2,452Updated this week
- nodejsscan is a static security code scanner for Node.js applications.☆2,580Sep 21, 2026Updated last month
- HTTP fuzzer engine security oriented☆62Oct 25, 2026Updated last week
- ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.☆2,478Jun 11, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- OpenAPI fuzzer for web applications written in go☆14Apr 25, 2026Updated 6 months ago
- Performing security tests inside your CI☆598May 15, 2024Updated 2 years ago
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆17,517Updated this week
- threatspec - continuous threat modeling, through code☆391Dec 30, 2020Updated 5 years ago
- Application Security Automation☆528Sep 5, 2023Updated 3 years ago
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,293Updated this week
- mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swif…☆797Oct 27, 2026Updated last week
- Custom semgrep rules registry☆14Aug 23, 2022Updated 4 years ago
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆149Sep 4, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆628Feb 10, 2026Updated 8 months ago
- Multi-Cloud Security Auditing Tool☆7,870Sep 23, 2025Updated last year
- Generic SAST Library☆140Oct 27, 2026Updated last week
- OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependen…☆7,760Updated this week
- Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.☆541Jan 6, 2023Updated 3 years ago
- Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and …☆22,145Updated this week
- Open-Source Unified Vulnerability Management, DevSecOps & ASPM☆5,193Updated this week
- Este repositorio é apenas um exemplo de como adicionar OWASP ZAP Actions em uma pipeline de DevOps.☆19Mar 12, 2021Updated 5 years ago
- A curated list of amazingly awesome Burp Extensions☆3,451Aug 15, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- All kind of frida stuff when needed in pentesting or reverse engineering of an android app - The perfect starter kit☆18Jun 2, 2020Updated 6 years ago
- A very vulnerable implementation of a GraphQL API.☆18Mar 27, 2026Updated 7 months ago
- A collection of custom security tools for quick needs.☆3,352Oct 18, 2026Updated 2 weeks ago
- Automated Security Testing For REST API's☆2,673Jun 5, 2024Updated 2 years ago
- ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The foc…☆14,874Updated this week
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆282Feb 17, 2026Updated 8 months ago
- This repository is a suplimentary material for Android Training's done by Anant Shrivastava from 2012-2017☆224Jan 4, 2021Updated 5 years ago