lambdasec / autogrepLinks
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
☆43Updated 6 months ago
Alternatives and similar repositories for autogrep
Users that are interested in autogrep are comparing it to the libraries listed below
Sorting:
- ☆83Updated 7 months ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆40Updated 8 months ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆71Updated this week
- XBOW Validation Benchmarks☆227Updated 2 months ago
- A collection of permissively licensed Semgrep rules.☆13Updated last year
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆125Updated 6 months ago
- A very simple open source implementation of Google's Project Naptime☆168Updated 5 months ago
- Trail of Bits Testing Handbook☆79Updated last month
- Automated web vulnerability scanning with LLM agents☆347Updated 2 months ago
- future-proof vulnerability detection benchmark, based on CVEs in open-source repos☆60Updated this week
- A comprehensive list of software composition analysis tools.☆154Updated last year
- Secure Code Review AI Agent (SeCoRA) - AI SAST☆49Updated 7 months ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆136Updated last year
- Manager of third-party sources of Semgrep rules 🗂☆87Updated last year
- Learn AI security through a series of vulnerable LLM CTF challenges. No sign ups, no cloud fees, run everything locally on your system.☆297Updated last year
- An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.☆220Updated this week
- Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system…☆340Updated 3 weeks ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…☆129Updated 3 weeks ago
- Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endo…☆176Updated this week
- 🧠 LLMFuzzer - Fuzzing Framework for Large Language Models 🧠 LLMFuzzer is the first open-source fuzzing framework specifically designed …☆313Updated last year
- OSV-SCALIBR: A library for Software Composition Analysis☆487Updated this week
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆78Updated last month
- Delving into the Realm of LLM Security: An Exploration of Offensive and Defensive Tools, Unveiling Their Present Capabilities.☆164Updated last year
- AIGoat: A deliberately Vulnerable AI Infrastructure. Learn AI security through solving our challenges.☆249Updated 4 months ago
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆128Updated 2 months ago
- Top 10 for Agentic AI (AI Agent Security) serves as the core for OWASP and CSA Red teaming work☆131Updated 2 months ago
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆147Updated this week
- A web CTF for training developers in bug hunting and secure coding!☆99Updated 7 months ago
- Fork Threat Modeling Platform - Community☆24Updated 4 months ago
- Project Mantis: Hacking Back the AI-Hacker; Prompt Injection as a Defense Against LLM-driven Cyberattacks☆79Updated 3 months ago