Alternatives and similar repositories for mvsp

Users that are interested in mvsp are comparing it to the libraries listed below

• tailscale / security-policies
  Security policies for Tailscale
  ☆301Updated last week
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆320Updated 2 weeks ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆216Updated last year
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆176Updated 9 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆325Updated last month
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆700Updated 4 months ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆73Updated 2 weeks ago
• OWASP / OpenCRE
  ☆121Updated this week
• hashicorp-forge / grove
  A Software as a Service (SaaS) log collection framework.
  ☆177Updated 3 weeks ago
• microsoft / oss-ssc-framework
  Open Source Software Secure Supply Chain Framework
  ☆236Updated 2 years ago
• ossf / wg-metrics-and-metadata
  The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed co…
  ☆222Updated last year
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆72Updated 2 years ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆433Updated 3 months ago
• google / localtoast
  ☆114Updated last month
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious npm and PyPI packages
  ☆160Updated this week
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆153Updated 9 months ago
• ossf / oss-vulnerability-guide
  A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…
  ☆128Updated 8 months ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated 3 weeks ago
• segmentio / threat-modeling-training
  Segment's Threat Modeling training for our engineers
  ☆245Updated 4 years ago
• Rhosys / soc2.fyi
  SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.
  ☆44Updated last month
• luisfontes19 / orgsec-guide
  A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program
  ☆42Updated 2 months ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated last year
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆146Updated last year
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆359Updated this week
• JupiterOne / security-policy-templates
  A set of policies, standards and control procedures with mapping to HIPAA, NIST CSF, PCI DSS, SOC2, FedRAMP, CIS Controls, and more.
  ☆324Updated last year
• t0sche / cvss-bt
  Enriching the NVD CVSS scores to include Temporal & Threat Metrics
  ☆209Updated this week
• smithy-security / smithy
  The security workflow engine!
  ☆119Updated last week
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆334Updated 4 months ago
• JupiterOne / starbase
  Graph-based security analysis for everyone
  ☆350Updated last year
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆366Updated 4 years ago