Alternatives and similar repositories for ochrona-cli:

Users that are interested in ochrona-cli are comparing it to the libraries listed below

• cr0hn / dockerfile-security
  Static security checker for Dockerfiles
  ☆93Updated 9 months ago
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆59Updated 6 months ago
• DenizParlak / hayat
  Hayat is a script for report and analyze Google Cloud Platform resources.
  ☆79Updated 5 years ago
• apiiro / combobulator
  Dependency Combobulator
  ☆89Updated last year
• himazawa / bento
  Bento Toolkit is a minimal fedora-based container for penetration tests and CTF with the sweet addition of GUI applications.
  ☆76Updated 4 years ago
• lightspin-tech / red-bucket-gcp
  ☆10Updated 2 years ago
• matiassequeira / docker_explorer
  Scan DockerHub images that match a keyword to find secrets.
  ☆55Updated 3 years ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated last year
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆75Updated 4 months ago
• mllamazares / vulncov
  🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
  ☆37Updated last month
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆138Updated 3 years ago
• zapbot / zap-mgmt-scripts
  ZAP Management Scripts
  ☆21Updated last week
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆75Updated 2 years ago
• tldrrun / tools.tldr.run
  A curated list of security tools for Hackers & Builders!
  ☆98Updated 5 months ago
• PaperMtn / github-watchman
  Monitoring GitHub for sensitive data shared publicly
  ☆66Updated 3 years ago
• mario-platt / ASVS-Agile-Delivery-Guide
  ☆36Updated 3 years ago
• lightspin-tech / red-detector
  Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)
  ☆88Updated 2 years ago
• nccgroup / ccs
  ☆110Updated last year
• faloker / purify
  All-in-one tool for managing vulnerability reports from AppSec pipelines
  ☆105Updated 2 years ago
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆31Updated 3 years ago
• stacscan / stacs
  Static Token And Credential Scanner
  ☆95Updated last year
• goldfiglabs / sgCheckup
  sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.
  ☆81Updated 3 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 2 years ago
• infobyte / faraday_plugins
  Security tools report parsers for Faradaysec.com
  ☆51Updated last week
• psiinon / owasp-projects
  ☆30Updated last year
• Frichetten / aws_api_shapeshifter
  A small library to alter AWS API requests; Used for fuzzing research
  ☆21Updated last year
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆44Updated 4 years ago
• pseudo-security / slacksecrets
  Scans Slack for API tokens, credentials, passwords, and more using YARA rules
  ☆38Updated 3 years ago
• abhisek / supply-chain-security-gateway
  Reference architecture and proof of concept implementation for supply chain security gateway
  ☆23Updated last year