Alternatives and similar repositories for insider:

Users that are interested in insider are comparing it to the libraries listed below

• AppThreat / sast-scan
  Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…
  ☆147Updated 4 years ago
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆827Updated last year
• ajinabraham / njsscan
  njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
  ☆388Updated 3 months ago
• OWASP / Docker-Security
  Getting a handle on container security
  ☆644Updated last year
• c0rdis / security-champions-playbook
  Security Champions Playbook v 2.1
  ☆358Updated last year
• SasanLabs / VulnerableApp
  OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.
  ☆302Updated 3 months ago
• imperva / automatic-api-attack-tool
  Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…
  ☆467Updated last year
• ZupIT / horusec
  Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
  ☆1,178Updated this week
• OWASP / ASST
  OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
  ☆164Updated 3 weeks ago
• softwaresecured / secure-code-review-checklist
  A starter secure code review checklist
  ☆180Updated 6 years ago
• MobSF / mobsfscan
  mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swif…
  ☆640Updated 3 weeks ago
• Fuzzapi / API-fuzzer
  API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
  ☆392Updated 7 years ago
• globocom / huskyCI
  Performing security tests inside your CI
  ☆576Updated 9 months ago
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆314Updated 2 years ago
• OWASP / threat-model-cookbook
  This project is about creating and publishing threat model examples.
  ☆417Updated 3 years ago
• OWASP / www-project-proactive-controls
  OWASP Foundation Web Respository
  ☆139Updated 2 months ago
• zaproxy / zap-hud
  The ZAP Heads Up Display (HUD)
  ☆258Updated 2 weeks ago
• OWASP / samm
  SAMM stands for Software Assurance Maturity Model.
  ☆398Updated 2 years ago
• auth0 / repo-supervisor
  Scan your code for security misconfiguration, search for passwords and secrets.
  ☆642Updated last year
• zaproxy / zap-api-python
  ZAP Python API
  ☆188Updated 2 weeks ago
• semgrep / semgrep-rules
  Semgrep rules registry
  ☆857Updated this week
• OWASP / Maturity-Models
  Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
  ☆192Updated 6 years ago
• owaspsamm / sammwise
  NextJS-based single-page application for completing and reviewing SAMM assessments
  ☆70Updated last year
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆274Updated 2 years ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆345Updated 4 years ago
• ICTU / zap2docker-auth-weekly
  Zap baseline scanner in Docker with authentication
  ☆104Updated 9 months ago
• Fuzzapi / fuzzapi
  Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
  ☆646Updated 3 years ago
• mgreiler / secure-code-review-checklist
  ☆184Updated last year
• OWASP / threat-dragon-desktop
  Desktop variant of OWASP Threat Dragon
  ☆77Updated 3 years ago
• OWASP / Container-Security-Verification-Standard
  Container Security Verification Standard
  ☆58Updated 5 years ago