Alternatives and similar repositories for mvsp:

Users that are interested in mvsp are comparing it to the libraries listed below

• tailscale / security-policies
  Security policies for Tailscale
  ☆287Updated 3 months ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆171Updated 4 months ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆70Updated 3 weeks ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 7 months ago
• OWASP / OpenCRE
  ☆100Updated 2 weeks ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆207Updated 9 months ago
• openvex / spec
  OpenVEX Specification
  ☆144Updated 2 weeks ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆165Updated 7 months ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆263Updated last week
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated last year
• cloudflare / har-sanitizer
  ☆208Updated 6 months ago
• owasp-change / owasp-change.github.io
  An Open Letter to the OWASP Board
  ☆106Updated last year
• dropbox / vsmc
  Vendor Security Model Contract
  ☆98Updated 2 years ago
• google / localtoast
  ☆112Updated 3 months ago
• owaspsamm / core
  Core model including reused documentation
  ☆95Updated 2 weeks ago
• opengrep / opengrep-rules
  ☆60Updated 2 months ago
• segmentio / threat-modeling-training
  Segment's Threat Modeling training for our engineers
  ☆243Updated 3 years ago
• hashicorp-forge / grove
  A Software as a Service (SaaS) log collection framework.
  ☆163Updated 3 weeks ago
• cashapp / pivit
  ☆97Updated 2 weeks ago
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆329Updated last year
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆236Updated 2 years ago
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆120Updated 2 months ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆165Updated last week
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆107Updated last year
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆92Updated last week
• cisagov / kev-data
  Mirror of cisa.gov/kev data files
  ☆45Updated this week
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆58Updated last year
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆137Updated 2 years ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated last year
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆148Updated 4 months ago