ASH - The Automated Security Helper Logo

ASH - The Automated Security Helper

0
Free
Visit Website

The security helper tool was created to help you reduce the probability of a security violation in a new code, infrastructure or IAM configuration by providing a fast and easy tool to conduct preliminary security check as early as possible within your development process. It is not a replacement of a human review nor standards enforced by your team/customer. It uses light, open source tools to maintain its flexibility and ability to run from anywhere. ASH is cloning and running different open-source tools, such as: git-secrets, bandit, Semgrep, Grype, Syft, nbconvert, npm-audit, checkov, cdk-nag and cfn-nag. Please review the tools LICENSE before usage. ASH change advisory: We are currently working on a re-architecture of ASH targeting a single-container architecture as well as documentation to go along with it. Supported frameworks: The security helper supports

FEATURES

ALTERNATIVES

Tracee is a runtime security and observability tool using eBPF technology.

Detect users' operating systems and perform redirection with Apache mod_rewrite.

A low overhead rate limiter for your routes

Kiterunner is a tool for lightning-fast traditional content discovery and bruteforcing API endpoints in modern applications.

Automated framework for monitoring and tampering system API calls of native macOS, iOS, and Android apps.

A SaaS-based web application firewall that combines signature and behavioral-based threat detection to protect applications deployed across cloud, on-premises and edge environments.

A tool for identifying and extracting parameters from HTTP requests and responses

A third-party Nginx module that prevents common web attacks by reading a small subset of simple rules containing 99% of known patterns involved in website vulnerabilities.