Backlash
0
Commercial
Backslash Security is an application security platform that utilizes reachability analysis to enhance traditional Static Application Security Testing (SAST) and Software Composition Analysis (SCA) capabilities. The tool aims to reduce false positives and prioritize vulnerabilities by analyzing code reachability and data flow context. It offers features such as phantom package detection, fix simulation, and AI-powered remediation advice. Backslash integrates with CI/CD pipelines and provides automated security checks for pull requests. The platform also includes functionality for generating Software Bill of Materials (SBOM) and Vulnerability Exploitability eXchange (VEX) reports. Additional features include secret detection in code, open-source license policy enforcement, and malicious package identification. The tool is designed to provide visibility into application risks and help development teams focus on addressing the most critical security issues.
FEATURES
The author has not provided features for this tool yet. If you are the author, please sign in or claim the tool to add features by clicking the icon above.
ALTERNATIVES
A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
Detect users' operating systems and perform redirection with Apache mod_rewrite.
A tool for secure content publishing and verification using offline signing and trusted collections.
IDAPython plugin for generating Yara rules/patterns from x86/x86-64 code through parameterization.
A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.
Firejail is a SUID sandbox program for restricting the running environment of untrusted applications on Linux.
A static code analysis tool for parsing common data formats to detect hardcoded credentials and dangerous functions.
A Rust-based command-line tool for analyzing .apk files to detect vulnerabilities.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Commercial
Resources
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Free
Security Operations
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Free
Blogs and News
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Commercial
Security Operations
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Commercial
Application Security
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Commercial
IAM
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Commercial
Cloud Security
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.
Commercial
AI Security