insidersec / insiderLinks
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆540Updated 3 years ago
Alternatives and similar repositories for insider
Users that are interested in insider are comparing it to the libraries listed below
Sorting:
- Security Champions Playbook v 2.1☆370Updated last year
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆401Updated 6 months ago
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆842Updated last year
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆474Updated 2 years ago
- threatspec - continuous threat modeling, through code☆358Updated 4 years ago
- Application Security Automation☆528Updated last year
- This project is about creating and publishing threat model examples.☆419Updated 3 years ago
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,226Updated last week
- SAMM stands for Software Assurance Maturity Model.☆397Updated 3 years ago
- Security Knowledge Framework (SKF) Python Flask / Angular project☆820Updated last year
- The DevSecOps toolset for REST APIs☆274Updated 2 years ago
- Scan your code for security misconfiguration, search for passwords and secrets.☆647Updated last year
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆148Updated 4 years ago
- Performing security tests inside your CI☆578Updated last year
- A starter secure code review checklist☆182Updated 6 years ago
- Getting a handle on container security☆655Updated last year
- A Continuous Threat Modeling methodology☆319Updated 2 years ago
- The Secure Coding Dojo is a platform for delivering secure coding knowledge.☆581Updated 2 months ago
- An open source threat modeling tool from OWASP☆1,112Updated this week
- The Secure Coding Framework☆268Updated 4 years ago
- Repo for all the SKF Docker lab examples☆453Updated 10 months ago
- Agile Threat Modeling Toolkit☆671Updated last month
- API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities☆397Updated 7 years ago
- The ZAP Heads Up Display (HUD)☆264Updated 4 months ago
- grep rough audit - source code auditing tool☆1,614Updated 2 weeks ago
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆194Updated 6 years ago
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆473Updated 7 months ago
- An installable desktop variant of OWASP Threat Dragon☆594Updated 7 months ago
- Zap baseline scanner in Docker with authentication☆103Updated last year
- OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.☆170Updated 4 months ago