Backlash
0
Commercial
Backslash Security is an application security platform that utilizes reachability analysis to enhance traditional Static Application Security Testing (SAST) and Software Composition Analysis (SCA) capabilities. The tool aims to reduce false positives and prioritize vulnerabilities by analyzing code reachability and data flow context. It offers features such as phantom package detection, fix simulation, and AI-powered remediation advice. Backslash integrates with CI/CD pipelines and provides automated security checks for pull requests. The platform also includes functionality for generating Software Bill of Materials (SBOM) and Vulnerability Exploitability eXchange (VEX) reports. Additional features include secret detection in code, open-source license policy enforcement, and malicious package identification. The tool is designed to provide visibility into application risks and help development teams focus on addressing the most critical security issues.
FEATURES
The author has not provided features for this tool yet. If you are the author, please sign in or claim the tool to add features by clicking the icon above.
ALTERNATIVES
Scan files for viruses and malware with language-agnostic REST API
Commercial
Cross-site scripting labs for web application security enthusiasts
A series of levels teaching about common mistakes and gotchas when using Amazon Web Services (AWS).
Revelo is an experimental Javascript deobfuscator tool with features to analyze and deobfuscate Javascript code.
ESLint plugin to prevent Trojan Source attacks.
A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.
An insecure web application with multiple vulnerable web service components for learning real-world web service vulnerabilities.
A tool for brute-forcing GET and POST parameters to discover potential vulnerabilities in web applications.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Free
Security Operations
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Free
Blogs and News
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Commercial
Cloud Security
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.
Commercial
AI Security