A simple threat modeling tool to help humans to reduce time-to-value when threat modeling

🎨 Diagram as Code for prototyping cloud system architectures

A small collection of vulnerable code snippets

The Elevation of Privilege Threat Modeling Game

A vault for securely storing and accessing AWS credentials in development environments

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Leiningen plugin responsible for finding possible vulnerabilities in clojure applications.

An open source gitlab linting utility

Application Security Verification Standard

code reviews to practice

Vilicus is an open source tool that orchestrates security scans of container images(docker/oci) and centralizes all results into a database for further analysis and metrics.

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Project template using clean architecture principles and OpenAPI to generate server/client code.

A curated list for Awesome Kubernetes Security resources

Go library for accessing the GitHub v3 API

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

Easy links and guides for DEF CON 28 and 29

Structured, pluggable logging for Go.

Roadmap to becoming a Go developer in 2020

Material UI: Comprehensive React component library that implements Google's Material Design. Free forever.

🚦 Cachet, the open-source, self-hosted status page system.

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a rang…

A dependency injection based application framework for Go.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Tfsec is now part of Trivy

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Web application fuzzer

Golang for Security Professionals

Code samples for No Starch Press Black Hat Go