Secure-development AI skills package, empowering your AI development tools

The OWASP Benchmark for Python is a test suite designed to verify the accuracy of Python software vulnerability detection tools. A fully runnable web app written in Python, it supports analysis by …

Load Lazy Contexts

The Lola Open Market Place for sharing modules

Boann Security Risk AI Agent: Single Pane of Glass from OCSF (Open Cybersecurity Schema Framework) Data

Composable building blocks to build Llama Apps

RapiDAST provides a framework for continuous, proactive and fully automated dynamic scanning against web apps/API.

This repository is the official source of record for upstream Konflux documentation.

A basic sample application using Python with devfile

An enterprise friendly way of detecting and preventing secrets in code.

A small vulnerable API (DO NOT USE IN PRODUCTION)

OWASP ZAP Add-ons

⚒️ Redocly CLI makes OpenAPI easy. Lint/validate to any standard, generate beautiful docs, and more.

🆔 A python library for accurate and scalable fuzzy matching, record deduplication and entity-resolution.

Swagger 2.0 and OpenAPI 3.0 command-line tool

An OOB interaction gathering server and client library

DefectDojo is a DevSecOps and vulnerability management platform.

The OWASP Vulnerable Container Hub(VULCONHUB) provides files to build your own hands-on vulnerable container image to learn and practice security

A collection of ZAP scripts provided by the community - pull requests very welcome!