appsec-education by duo-labs
Presentations, training modules, and other education materials from Duo Security's Application Security team.
created at Oct. 22, 2019, 4:40 p.m.
kubectl-kubesec by controlplaneio
Security risk analysis for Kubernetes resources
created at May 8, 2018, 8:52 a.m.
harden-runner by step-security
Network egress filtering and runtime security for GitHub-hosted and self-hosted runners
created at Oct. 28, 2021, 4:58 p.m.
preflight by SpectralOps
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
created at April 29, 2021, 10:37 a.m.
netz by SpectralOps
Discover internet-wide misconfigurations while drinking coffee
created at March 3, 2021, 6:47 p.m.
flawfinder by david-a-wheeler
a static analysis tool for finding vulnerabilities in C/C++ source code
created at Nov. 12, 2018, 5:23 p.m.
phpcs-security-audit by FloeDesignTechnologies
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
created at Oct. 22, 2013, 8:26 p.m.
puma-scan by pumasecurity
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
created at Oct. 19, 2016, 11:02 p.m.
dawnscanner by thesp0nge
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
created at April 4, 2013, 1:06 p.m.
scanner-cli by hawkeyesec
A project security/vulnerability/risk scanning tool
created at March 18, 2017, 3:24 p.m.
automatic-api-attack-tool by imperva
Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.
created at Nov. 6, 2019, 7:53 a.m.
repo-supervisor by auth0
Scan your code for security misconfiguration, search for passwords and secrets. 
created at Feb. 21, 2017, 8:06 p.m.
keyscope by SpectralOps
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
created at Oct. 1, 2021, 12:01 p.m.