ochronasec / ochrona-cliLinks
A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs
☆51Updated 2 years ago
Alternatives and similar repositories for ochrona-cli
Users that are interested in ochrona-cli are comparing it to the libraries listed below
Sorting:
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆75Updated last year
- ☆35Updated 4 years ago
- ☆114Updated 2 years ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆108Updated 2 years ago
- Static Token And Credential Scanner☆95Updated 2 years ago
- ☆74Updated 5 years ago
- ☆69Updated 5 months ago
- Global Security Database Tools☆43Updated 2 years ago
- Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)☆89Updated 3 years ago
- Dependency Combobulator☆94Updated last year
- IAMFinder enumerates and finds users and IAM roles in a target AWS account.☆111Updated 5 years ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Updated 4 years ago
- Cloud Security Operations Orchestrator☆188Updated last year
- A small tool to help developers understand a huge set of security requirements from appsec teams☆47Updated 3 years ago
- ☆41Updated 4 years ago
- AI featured threat modeling and security review action☆45Updated last year
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- Serverless honeytoken 🕵🏻♂️☆81Updated 2 years ago
- A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat …☆192Updated last year
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆74Updated 3 years ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆68Updated 5 months ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 3 years ago
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆78Updated 3 years ago
- Fork Threat Modeling Platform - Community☆27Updated 2 months ago
- CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.☆15Updated 4 years ago
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆77Updated 4 years ago
- Hayat is a script for report and analyze Google Cloud Platform resources.☆81Updated 5 years ago
- ☆10Updated 3 years ago
- Slack bot which promotes Defense in Depth/Zero Trust security practices☆24Updated 2 years ago
- 'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.☆64Updated 6 years ago