insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Ful…
☆506Updated 2 years ago
Related projects: ⓘ
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆790Updated last year
- threatspec - continuous threat modeling, through code☆327Updated 3 years ago
- njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.☆370Updated 5 months ago
- A Continuous Threat Modeling methodology☆303Updated 2 years ago
- Security Champions Playbook v 2.1☆341Updated 11 months ago
- SAMM stands for Software Assurance Maturity Model.☆396Updated 2 years ago
- The Secure Coding Framework☆258Updated 4 years ago
- This project is about creating and publishing threat model examples.☆402Updated 2 years ago
- Repo for all the OWASP-SKF Docker lab examples☆431Updated last month
- A Pythonic framework for threat modeling☆892Updated last month
- Agile Threat Modeling Toolkit☆594Updated last week
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆451Updated last year
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆145Updated 4 years ago
- Application Security Automation☆522Updated last year
- The DevSecOps toolset for REST APIs☆270Updated last year
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆271Updated last week
- NextJS-based single-page application for completing and reviewing SAMM assessments☆67Updated last year
- An open source threat modeling tool from OWASP☆888Updated this week
- An installable desktop variant of OWASP Threat Dragon☆594Updated last week
- A starter secure code review checklist☆175Updated 5 years ago
- ☆414Updated this week
- Draw.io libraries for threat modeling diagrams☆681Updated 3 years ago
- The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)☆284Updated 11 months ago
- ☆118Updated 10 months ago
- Getting a handle on container security☆625Updated 9 months ago
- Semgrep rules registry☆773Updated this week
- An open source, online threat modelling tool from OWASP☆481Updated 2 months ago
- Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.☆1,126Updated this week
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,359Updated last month
- A container analysis and exploitation tool for pentesters and engineers.☆619Updated 11 months ago