Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.

Apache License 2.0

raindance

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

sast-scan

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

Creative Commons Zero v1.0 Universal

awesome-devsecops

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

raindance

sast-scan

awesome-devsecops

raindance

awesome-threat-modelling

sast-scan