StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different sources such as IaC files, diagrams or projects exported from Threat Modelling tools.
☆54Mar 4, 2026Updated 7 months ago
Alternatives and similar repositories for startleft
Users that are interested in startleft are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆192Dec 11, 2025Updated 10 months ago
- Provides content useful for IriusRisk threat modelling, including templates, API scripts, libraries and more.☆18Oct 19, 2026Updated last week
- Amazon Web Services (AWS) Microsoft Threat Modeling Tool Template☆16Aug 19, 2021Updated 5 years ago
- Threats Manager Platform Core libraries and SDK☆78Dec 22, 2025Updated 10 months ago
- Templates for the Microsoft Threat Modeling Tool☆183May 7, 2026Updated 5 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- OWASP Foundation web repository☆53Oct 13, 2026Updated 2 weeks ago
- Simplifies the review and management of threat models in documents☆13Oct 13, 2026Updated 2 weeks ago
- A Continuous Threat Modeling methodology☆329Jun 24, 2022Updated 4 years ago
- Threat Modeling Tool Extension for Penetration Tester (TMTe4PT)☆12Mar 2, 2022Updated 4 years ago
- Microsoft Threat Modeling Template files☆211Nov 28, 2022Updated 3 years ago
- Documenting your Threat Models with HCL☆470Oct 25, 2026Updated last week
- Open SAMMY codebase☆30Updated this week
- Fork Threat Modeling Platform - Community☆30Oct 1, 2026Updated 3 weeks ago
- threatspec - continuous threat modeling, through code☆390Dec 30, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A documentation and tracking project with the goal of making package management systems more secure.☆52Mar 5, 2021Updated 5 years ago
- Agent skills to help with Continuous Threat Modeling☆21Jul 9, 2026Updated 3 months ago
- This Guidance helps organizations provide their data scientists with external package repository access while maintaining information sec…☆23Oct 20, 2024Updated 2 years ago
- DevOps for Serverless Applications, published by Packt☆12Jan 18, 2023Updated 3 years ago
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Jul 9, 2025Updated last year
- A utility to (re-)import findings and language data into DefectDojo☆43Sep 26, 2024Updated 2 years ago
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆640Updated this week
- OWASP Ontology-driven Threat Modelling framework☆45Jul 11, 2023Updated 3 years ago
- Practical Library Of Threats 4 Artificial Intelligence☆42Jun 19, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆193Aug 27, 2018Updated 8 years ago
- This repository stores content that can be used to design a Rapid Threat Model Prototyping process for a software development group.☆163Mar 14, 2023Updated 3 years ago
- Agile Threat Modeling as Code☆13Jun 30, 2022Updated 4 years ago
- Repo to hold mapping of user-security-stories☆120Nov 28, 2018Updated 7 years ago
- The Software Parts (SParts) lab delivers a Sawtooth-based ledger that provides both accountability and access to the open source componen…☆13Feb 20, 2020Updated 6 years ago
- Analysis of the Enterprise SAST/DAST product landscape☆38Feb 28, 2024Updated 2 years ago
- My macOS setup, automated with Ansible☆16Sep 30, 2024Updated 2 years ago
- OWASP Foundation Web Respository☆34Updated this week
- Attack Tree GPT is a C# program that uses Azure's Computer Vision and Azure OpenAI's GPT-4 to generate attack trees for AWS services as w…☆14Jun 19, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simplified simulation of a water treatment plant with Modbus and BACnet process control. Designed to serve as a target for MITRE Calder…☆17Oct 9, 2026Updated 3 weeks ago
- SOC2 compliance check for terraform☆13Dec 15, 2025Updated 10 months ago
- Threat Modeling Manifesto☆31May 28, 2026Updated 5 months ago
- OWASP Foundation Web Respository☆10Mar 14, 2026Updated 7 months ago
- Lecture notes and examples for the CMSC330 Spring 2024☆19Feb 28, 2025Updated last year
- A Rust framework for building LLM applications with support for 8+ LLM providers, agents, RAG, BM25/hybrid search, LangGraph workflows, a…☆18Oct 25, 2026Updated last week
- The Windows PATH Repair Tool is a comprehensive solution for repairing and optimizing your Windows PATH environment variables. It include…☆14Jul 7, 2025Updated last year