StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different sources such as IaC files, diagrams or projects exported from Threat Modelling tools.
☆53Mar 4, 2026Updated 4 months ago
Alternatives and similar repositories for startleft
Users that are interested in startleft are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆185Dec 11, 2025Updated 7 months ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆71Jun 25, 2025Updated last year
- Provides content useful for IriusRisk threat modelling, including templates, API scripts, libraries and more.☆16Apr 20, 2026Updated 3 months ago
- Amazon Web Services (AWS) Microsoft Threat Modeling Tool Template☆16Aug 19, 2021Updated 4 years ago
- OWASP Foundation web repository☆46Jun 22, 2026Updated last month
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Templates for the Microsoft Threat Modeling Tool☆181May 7, 2026Updated 2 months ago
- The Software Parts (SParts) lab delivers a Sawtooth-based ledger that provides both accountability and access to the open source componen…☆13Feb 20, 2020Updated 6 years ago
- GitHub action to generate a CycloneDX SBOM for Python☆14Apr 23, 2026Updated 3 months ago
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆110Jan 16, 2024Updated 2 years ago
- Threats Manager Platform Core libraries and SDK☆77Dec 22, 2025Updated 7 months ago
- DevOps for Serverless Applications, published by Packt☆12Jan 18, 2023Updated 3 years ago
- Documenting your Threat Models with HCL☆463Updated this week
- A utility to (re-)import findings and language data into DefectDojo☆43Sep 26, 2024Updated last year
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Jul 9, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Practical Library Of Threats 4 Artificial Intelligence☆41Jun 19, 2025Updated last year
- ☆19May 15, 2018Updated 8 years ago
- Reference GitHub Workflows for SBOM generation from the CISA SBOM Generation Reference Implementation Tiger Team☆34Feb 2, 2026Updated 5 months ago
- Library supporting secure keys, and crypto enabled JSON and CBOR☆18Updated this week
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆576Updated this week
- ☆101Sep 27, 2024Updated last year
- OWASP LLM Security Verification Standard☆57May 11, 2026Updated 2 months ago
- App that simplifies building decision trees to model adverse scenarios☆235Jul 11, 2024Updated 2 years ago
- An online multiplayer version of the Elevation of Privilege (EoP) threat modeling card game☆163Apr 22, 2026Updated 3 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Terraform module for creating AWS Network Firewall resources☆10Oct 14, 2024Updated last year
- ☆166Updated this week
- Examples of using Snyk's SBOM APIs.☆16Sep 29, 2022Updated 3 years ago
- Agile Threat Modeling Toolkit☆774Apr 8, 2026Updated 3 months ago
- Terraform module to configure AWS Firewall Manager☆19Updated this week
- ☆18Updated this week
- OWASP Foundation Web Respository☆10Mar 14, 2026Updated 4 months ago
- ☆12Oct 17, 2023Updated 2 years ago
- Manage CloudFormation Stacks through specifications☆13Jul 14, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Public website cyclonedx.org☆12Dec 20, 2024Updated last year
- General Open Architecture Security Questionnaire☆30Jul 25, 2023Updated 2 years ago
- CLI for selecting and back-testing CloudWatch alarm configuration☆10Aug 8, 2023Updated 2 years ago
- This project is a framework for delivering governed DevSecOps CloudFormation Stacks across AWS Accounts in an AWS Organisations/AWS Contr…☆11Sep 17, 2024Updated last year
- An open source threat modeling tool from OWASP☆1,527Updated this week
- Fork Threat Modeling Platform - Community☆29Jun 17, 2026Updated last month
- SIG Security - Software Bill of Materials☆19Aug 26, 2022Updated 3 years ago