Arnica
Arnica is an application security platform that provides comprehensive protection across the software development lifecycle. It offers real-time scanning and risk mitigation for various aspects of application security, including: 1. Code Security: Performs Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Infrastructure as Code (IaC) scanning to identify vulnerabilities in source code and third-party dependencies. 2. Secret Detection and Mitigation: Identifies and helps mitigate hardcoded secrets in real-time. 3. Software Bill of Materials (SBOM): Generates a catalog of all open-source libraries used across an organization. 4. Automated Developer Access Management: Implements least privilege access control for developers. 5. Anomalous Developer Behavior Detection: Monitors and alerts on unusual developer activities to protect against potential insider threats. 6. Security Reporting and Audit: Provides logging and reporting capabilities to support compliance efforts. 7. Application Security Posture Management (ASPM): Helps identify and prioritize risks in products and source code. Arnica integrates with various development tools and platforms, aiming to provide security coverage without impacting development velocity.
FEATURES
ALTERNATIVES
Utility for comparing control flow graph signatures to Android methods with scanning capabilities for malicious applications.
DVTA is a Vulnerable Thick Client Application with various security vulnerabilities.
A Burp extension for scanning JavaScript files for endpoint links
Octoscan is a static analysis tool that scans GitHub Actions workflows for security vulnerabilities and misconfigurations.
A tool for identifying potential security vulnerabilities in dependency configurations by checking for lingering free namespaces for private package names.
YLS Language Server for YARA Language with comprehensive features and Python 3.8 support.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.