Alternatives and similar repositories for asvs-checklist:

Users that are interested in asvs-checklist are comparing it to the libraries listed below

• Whitespots-OU / security-requirements-generator
  A small tool to help developers understand a huge set of security requirements from appsec teams
  ☆45Updated 2 years ago
• we45 / orchestron-community
  Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…
  ☆31Updated 2 years ago
• EdOverflow / bug-bounty-responses
  A collection of response templates for invalid bug bounty reports.
  ☆91Updated 7 years ago
• ivision-research / vulnerable-graphql-api
  A very vulnerable implementation of a GraphQL API.
  ☆59Updated 3 years ago
• PortSwigger / aws-security-checks
  AWS Security Checks
  ☆39Updated 7 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Updated 3 years ago
• we45 / Serverless-Workshop
  Serverless Workshop
  ☆16Updated 2 years ago
• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆64Updated last year
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• semgrep-old / rules-owasp-asvs
  Semgrep rules corresponding to the OWASP ASVS standard
  ☆27Updated 4 years ago
• faloker / purify
  All-in-one tool for managing vulnerability reports from AppSec pipelines
  ☆106Updated 2 years ago
• modulexcite / attacking-and-auditing-docker-containers-and-kubernetes-clusters
  Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters
  ☆14Updated 5 years ago
• shivsahni / NSDetect
  ☆23Updated 2 years ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 8 months ago
• pownjs / git
  Assorted tools for security-related task for git repositories
  ☆59Updated 3 years ago
• DefectDojo / Burp-Plugin
  A Burp plugin to export findings to DefectDojo
  ☆30Updated last year
• franksec42 / Vulnerability-management-maturity
  Maturity Model Collaborative project
  ☆15Updated 2 years ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆125Updated 2 years ago
• jorritfolmer / vulnerable-api
  Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops
  ☆42Updated last year
• Ebryx / S3Rec0n
  A colorful cross-platform python script to test misconfigurations of AWS S3 buckets both through authenticated and unauthenticated checks…
  ☆39Updated 3 years ago
• nccgroup / ccs
  ☆110Updated last year
• P3tra-WP / Jupyter-Threat
  ☆14Updated 2 years ago
• appsecpipeline / AppSecPipeline-Specification
  AppSecPipeline Specification for DevOps automation.
  ☆40Updated 2 years ago
• ZFPSystems / zaproxy-automation
  This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites
  ☆28Updated last year
• jeremychoi / owasp-asvs-wstg-checklist
  OWASP Application Security Checklist for testing (mapping ASVS with WSTG)
  ☆20Updated 4 years ago
• OWASP / Application-Security-Curriculum
  ☆24Updated 3 years ago
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆35Updated 3 years ago
• duo-labs / appsec-education
  Presentations, training modules, and other education materials from Duo Security's Application Security team.
  ☆73Updated 3 years ago
• lc / cspparse
  A tool to evaluate Content Security Policies.
  ☆71Updated 4 years ago
• Santandersecurityresearch / corsair_scan
  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
  ☆122Updated 2 years ago