insidersec / insiderLinks
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆543Updated 3 years ago
Alternatives and similar repositories for insider
Users that are interested in insider are comparing it to the libraries listed below
Sorting:
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆845Updated last year
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆406Updated 8 months ago
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆148Updated 4 years ago
- The DevSecOps toolset for REST APIs☆273Updated 2 years ago
- Security Champions Playbook v 2.1☆375Updated last year
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆480Updated 2 years ago
- NextJS-based single-page application for completing and reviewing SAMM assessments☆76Updated 2 years ago
- threatspec - continuous threat modeling, through code☆362Updated 4 years ago
- A starter secure code review checklist☆182Updated 6 years ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆223Updated last year
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆949Updated this week
- Purposely vulnerable Java application to help lead secure coding workshops☆183Updated last year
- This project is about creating and publishing threat model examples.☆419Updated 3 years ago
- The ZAP Heads Up Display (HUD)☆265Updated 5 months ago
- Agile Threat Modeling Toolkit☆683Updated this week
- A Continuous Threat Modeling methodology☆323Updated 3 years ago
- Getting a handle on container security☆658Updated last year
- A comprehensive list of software composition analysis tools.☆151Updated last year
- ☆123Updated last year
- The Secure Coding Framework☆266Updated 4 years ago
- secureCodeBox (SCB) - continuous secure delivery out of the box☆903Updated this week
- Repo for all the SKF Docker lab examples☆455Updated 11 months ago
- OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.☆331Updated last week
- Application Security Automation☆527Updated last year
- Checkmarx Scan and Result Orchestration☆99Updated last week
- Security Knowledge Framework (SKF) Python Flask / Angular project☆818Updated last year
- ☆189Updated 2 years ago
- A Pythonic framework for threat modeling☆1,018Updated last month
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆735Updated 11 months ago
- Zap baseline scanner in Docker with authentication☆103Updated last year