insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆524Updated 2 years ago
Alternatives and similar repositories for insider:
Users that are interested in insider are comparing it to the libraries listed below
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆830Updated last year
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆390Updated 3 months ago
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,186Updated this week
- Security Champions Playbook v 2.1☆359Updated last year
- A Continuous Threat Modeling methodology☆313Updated 2 years ago
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆148Updated 4 years ago
- mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swif…☆644Updated last month
- Semgrep rules registry☆868Updated this week
- threatspec - continuous threat modeling, through code☆347Updated 4 years ago
- This project is about creating and publishing threat model examples.☆418Updated 3 years ago
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆547Updated this week
- Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan☆850Updated this week
- Scan your code for security misconfiguration, search for passwords and secrets.☆643Updated last year
- NextJS-based single-page application for completing and reviewing SAMM assessments☆70Updated last year
- An open source, online threat modelling tool from OWASP☆483Updated 8 months ago
- OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…☆692Updated this week
- Getting a handle on container security☆644Updated last year
- Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…☆644Updated this week
- ☆122Updated last year
- Agile Threat Modeling Toolkit☆648Updated 3 weeks ago
- ☆181Updated 4 months ago
- Generic SAST Library☆129Updated 3 months ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆712Updated 6 months ago
- A starter secure code review checklist☆181Updated 6 years ago
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆468Updated last year
- An installable desktop variant of OWASP Threat Dragon☆594Updated 3 months ago
- a Damn Vulnerable Serverless Application☆535Updated last year
- Purposely vulnerable Java application to help lead secure coding workshops☆178Updated 8 months ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆220Updated 9 months ago
- OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.☆164Updated last month