Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
The security workflow engine!
Curated resources for the EU Cyber Resilience Act (Regulation 2024/2847): regulation, harmonised standards, EUCC, SBOM, vulnerability management, conformity assessment
Damn Vulnerable SCA Application
📚A curated list of product security resources.
Custom gitleaks configuration
Managing GitHub Advanced Security (GHAS) Controls at Scale
Browser-based Yocto CVE dashboard for analyzing cve-summary.json, reviewing embedded Linux vulnerabilities, and exporting HTML/PDF security reports.
Agent-neutral AI skill for EU Cyber Resilience Act (Regulation (EU) 2024/2847) readiness assessments: pinned official texts, 96-provision catalogue, risk assessment, SBOM checks, Article 14 reporting readiness, draft technical documentation and formal reports. Not legal advice; not a conformity assessment.
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Product Security in Cybersecurity.
Self-hosted open-source cybersecurity governance platform for ISO 27001, NIS2, DORA, CRA, product security and AI governance.
20 hands-on security engineering labs covering attack surface discovery, reverse engineering, protocol analysis, fuzzing, CVSS scoring, and responsible disclosure.
AS{2} aims to provide visibility, compliance, alerting, and reporting capabilities. The primary focus is to integrate open-source tools used by AppSec teams in one place with better visibility.
Collection of insights and recommendations gathered from my time working in security.
GitHub Action for ForgeVault CRA product-security readiness checks
Public CRA Direct documentation for SBOM evidence, Article 14 workflows, HITL review, and audit trails.
Security Research and PoC
Deliberately vulnerable AI agent marketplace — the full Product Security lifecycle: threat model → attack → defend → regression test → detect. MCP + Agent Skills supply chain.
To associate your repository with the product-security topic, visit your repo's landing page and select "manage topics."