Alternatives and similar repositories for mvsp

Users that are interested in mvsp are comparing it to the libraries listed below

• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆172Updated 6 months ago
• tailscale / security-policies
  Security policies for Tailscale
  ☆292Updated last month
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆212Updated 10 months ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆279Updated this week
• segmentio / threat-modeling-training
  Segment's Threat Modeling training for our engineers
  ☆243Updated 4 years ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆70Updated 2 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆71Updated last year
• OWASP / OpenCRE
  ☆108Updated last week
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆173Updated 2 months ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated 2 weeks ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 9 months ago
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆235Updated 2 years ago
• dropbox / vsmc
  Vendor Security Model Contract
  ☆98Updated 2 years ago
• ossf / security-baseline
  ☆85Updated this week
• openvex / spec
  OpenVEX Specification
  ☆150Updated 2 months ago
• ossf / wg-metrics-and-metadata
  The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed co…
  ☆222Updated last year
• scribe-public / gitgat
  Evaluate source control (GitHub) security posture
  ☆249Updated 2 years ago
• hashicorp-forge / grove
  A Software as a Service (SaaS) log collection framework.
  ☆170Updated last week
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆199Updated this week
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆149Updated 6 months ago
• google / localtoast
  ☆112Updated last week
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆58Updated last year
• owaspsamm / core
  Core model including reused documentation
  ☆98Updated this week
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆108Updated last year
• opengrep / opengrep-rules
  ☆68Updated 4 months ago
• eBay / sbom-scorecard
  Generate a score for your sbom to understand if it will actually be useful.
  ☆229Updated 9 months ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious PyPI and npm packages
  ☆145Updated this week
• owasp-change / owasp-change.github.io
  An Open Letter to the OWASP Board
  ☆106Updated last year
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆147Updated 2 months ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆430Updated this week