Minimum Viable Secure Product mvsp.dev
☆204Dec 17, 2024Updated last year
Alternatives and similar repositories for mvsp
Users that are interested in mvsp are comparing it to the libraries listed below
Sorting:
- ☆20Jan 18, 2022Updated 4 years ago
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated last year
- Interactive CD dependency diagram☆29Feb 15, 2026Updated 2 weeks ago
- We borrow the concept of 'personas' from UX/service design and apply it to threat actors to improve understanding between security, techn…☆11Jun 17, 2020Updated 5 years ago
- ☆15Dec 22, 2021Updated 4 years ago
- Slack alert bot for matching Github Audit Events☆10Nov 12, 2024Updated last year
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆110Jan 16, 2024Updated 2 years ago
- Yet Another SCA tool☆13Nov 10, 2022Updated 3 years ago
- OWASP Application Security Verification Standard 4.0 Checklist☆33Apr 15, 2019Updated 6 years ago
- ☆14Nov 13, 2023Updated 2 years ago
- A tool for folks who `git clone` first and ask questions later☆66Sep 12, 2025Updated 5 months ago
- Systematic Universal Security Testing Orchestration☆37Mar 28, 2022Updated 3 years ago
- GitHub Action to generate GitHub Advanced Security (GHAS) metrics report☆18Feb 1, 2025Updated last year
- Simple tool to track maturity assessments☆13Jul 8, 2023Updated 2 years ago
- ☆15Jan 11, 2024Updated 2 years ago
- Probely's GitHub Action☆17Apr 8, 2025Updated 10 months ago
- A Java library for programmatically calculating OWASP Risk Rating scores☆19Apr 3, 2023Updated 2 years ago
- Software Component Verification Standard (SCVS)☆156Apr 1, 2025Updated 11 months ago
- Register your Kubernetes IPs to monitor.shodan.io☆18Oct 28, 2022Updated 3 years ago
- Catalogist is the easy way to catalog and make your software and (micro)services visible to your organization in a lightweight and develo…☆20Nov 12, 2024Updated last year
- Prompts Methods to find the vulnerabilities in Generative Models☆20Feb 23, 2023Updated 3 years ago
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆53Nov 25, 2025Updated 3 months ago
- A repo to conduct vulnerability enrichment.☆738Updated this week
- A step-by-step guide on how to install and sign a linux kernel to boot with Secure Boot, because it shouldn't be so hard to have the late…☆19Feb 15, 2023Updated 3 years ago
- This repository provides a comprehensive collection of Pulumi scenarios utilized by cnappgoat☆21Jan 28, 2025Updated last year
- ☆19Aug 10, 2021Updated 4 years ago
- ☆25Aug 3, 2024Updated last year
- A checklist for defending private or corporate networks.☆17Jan 1, 2020Updated 6 years ago
- Repository to archive AWS Documentation for local use☆50Oct 14, 2024Updated last year
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Mar 9, 2025Updated 11 months ago
- ☆563Feb 25, 2026Updated last week
- A documentation and tracking project with the goal of making package management systems more secure.☆51Mar 5, 2021Updated 5 years ago
- Threat model for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach☆157Updated this week
- OWASP Foundation web repository☆52Dec 21, 2025Updated 2 months ago
- Supply-chain Levels for Software Artifacts☆1,816Updated this week
- Vendor Security Model Contract☆97Jul 3, 2022Updated 3 years ago
- Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…☆912Updated this week
- OpenSSF Scorecard - Security health metrics for Open Source☆5,283Feb 25, 2026Updated last week
- Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.☆55Dec 9, 2025Updated 2 months ago