#appsec (30 Repositories)
Ranked open-source repositories tagged with #appsec, scored by pull request acceptance likelihood and maintainer engagement velocity.
74.3%
27.6h
30 repositories tagged #appsec
OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
OWASP/cornucopia
The source files and tools needed to build the OWASP Cornucopia decks in various languages
DataDog/dd-trace-php
Datadog PHP Clients
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
DataDog/dd-trace-go
Datadog Go Library including APM tracing, profiling, and security monitoring.
openziti/ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
zaproxy/zaproxy
The ZAP by Checkmarx Core project
awslabs/threat-designer
Threat Designer is a GenerativeAI application designed to automate and streamline the threat modeling process for secure system design.
dependency-check/dependency-check-sonar-plugin
Integrates Dependency-Check reports into SonarQube
OWASP/CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
sbom-tool/sbom-tools
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
zaproxy/community-scripts
A collection of ZAP scripts and tips provided by the community - pull requests very welcome!
OWASP/www-project-secure-headers
The OWASP Secure Headers Project
ParzivalHack/PySpector
PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. It leverages a powerful Rust core to deliver high-speed, accurate vulnerability scanning, wrapped in a developer-friendly Python CLI.
Zyrexnn/Cybermes
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
m14r41/PentestingEverything
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
aeria-org/aeria
A framework/language to prototype webapps fast so you can touch grass
maurosoria/dirsearch
Web path scanner
lirantal/npq
safely install npm packages by auditing them pre-install stage
oversecured/ovaa
Oversecured Vulnerable Android App
juice-shop/juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
zaproxy/zap-hud
The ZAP Heads Up Display (HUD)
openappsec/openappsec
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
Checkmarx/2ms
Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git
jenkinsci/dependency-check-plugin
Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
OWASP/www-community
OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
klarna-incubator/gram
Gram is Klarna's own threat model diagramming tool
OWASP/railsgoat
A vulnerable version of Rails that follows the OWASP Top 10