Essential tools and best practices for securing software applications throughout their lifecycle.
Explore 193 curated tools and resources
A free online tool to scan for DOM-based XSS vulnerabilities in HTML, JavaScript, and CSS files.
Insider is a source code analysis tool focusing on OWASP Top 10 vulnerabilities with easy integration into DevOps pipelines.
Embeddable Yara library for Java with support for loading rules and scanning data.
IronBee is an open source project building a universal web application security sensor.
An insecure web application with multiple vulnerable web service components for learning real-world web service vulnerabilities.
A simple, secure framework for building scalable applications
StaCoAn is a cross-platform tool for static code analysis on mobile applications, emphasizing the identification of security vulnerabilities.
YLS Language Server for YARA Language with comprehensive features and Python 3.8 support.
A PHP port of Rack::Honeypot, a spam trap that detects and blocks spambots
Hack with JavaScript XSS'OR tool for encoding/decoding and various XSS related functionalities.
SearchCode is an extensive code search engine that indexes 75 billion lines of code from millions of projects to help developers find coding examples and libraries.
Dynamic application security testing tool for identifying and fixing web application vulnerabilities.
Drltrace is a dynamic API calls tracer for Windows and Linux applications.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.