Alternatives and similar repositories for awesome-secure-defaults:

Users that are interested in awesome-secure-defaults are comparing it to the libraries listed below

• TupleType / awesome-cicd-attacks
  Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  ☆516Updated 2 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆320Updated last month
• x1trap / websec-answers
  Websec interview questions by tib3rius answered
  ☆307Updated last year
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆366Updated 3 months ago
• tadwhitaker / Security_Architect_and_Principal_Security_Engineer_Interview_Questions
  This is a companion to the Security Engineer Questions
  ☆201Updated last year
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆266Updated last week
• openai / openai-security-bots
  ☆366Updated last year
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆177Updated last week
• praetorian-inc / gato
  GitHub Actions Pipeline Enumeration and Attack Tool
  ☆628Updated 2 weeks ago
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆286Updated last year
• latiotech / LAST
  Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
  ☆166Updated this week
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆655Updated 2 months ago
• securitytemplates / sectemplates
  Open source templates you can use to bootstrap your security programs
  ☆839Updated 3 weeks ago
• crashappsec / chalk
  Chalk allows you to follow code from development, through builds and into production.
  ☆371Updated last week
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆249Updated 5 months ago
• DataDog / grimoire
  Generate datasets of cloud audit logs for common attacks
  ☆213Updated 8 months ago
• ghostsecurity / reaper
  💀 Don't fear the Reaper 👻
  ☆502Updated this week
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆194Updated this week
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆243Updated last month
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆143Updated 10 months ago
• awslabs / threat-composer
  A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
  ☆548Updated 2 weeks ago
• cado-security / cloudgrep
  cloudgrep is grep for cloud storage
  ☆327Updated last month
• step-security / github-actions-goat
  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment
  ☆464Updated last month
• mikeprivette / awesome-sec-challenges
  A curated list of Awesome Security Challenges.
  ☆180Updated 5 months ago
• hotnops / apeman
  AWS Attack Path Management Tool - Walking on the Moon
  ☆244Updated 4 months ago
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆398Updated 4 months ago
• secengjeff / awskillswitch
  Lambda function that streamlines containment of an AWS account compromise
  ☆343Updated last year
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆148Updated 5 months ago
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆339Updated 3 weeks ago
• ManuelBerrueta / FlowAnalyzer
  FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).
  ☆181Updated 9 months ago