101 Open source projects that are alternatives of or similar to Awesome Devsecops_ru

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot). Simply put it's nmap converter.

A schema and set of tools for using SQL to query cloud infrastructure.

DevSecOps Toolchain

'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.

Detect Sensitive REST API communication using Deep Neural Networks

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

CLI to interact with Kondukto

GitGuardian Shield GitHub Action - Find exposed credentials in your commits

Ultimate DevSecOps library

Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

The Solutions Delivery Platform runtime pipeline framework

GitGuardian Shield GitHub Action - Find exposed credentials in your commits

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

Identify hardcoded secrets and dangerous behaviours

The Secure Coding Framework

ContainerSSH: Launch containers on demand

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

Curating the best DevSecOps resources and tooling.

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

The DevSecOps toolset for REST APIs

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

🔐 Docker Container for Penetration Testing & Security

🔱 Collection and Roadmap for everyone who wants DevSecOps.

Agile Threat Modeling Toolkit

🔥Open source RASP solution

nodejsscan is a static security code scanner for Node.js applications.

Awesome DevSecOps на русском языке

Centralize Vulnerability Assessment and Management for DevSecOps Team

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Kubernetes Common Configuration Scoring System

This repository contains information about DevSecOps and how to get involved in this community effort.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

All-in-one tool for managing vulnerability reports from AppSec pipelines

Security scanner for your Terraform code

🛡️ Make your web services secure by default !