Clair
Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent. The book contains all the documentation on Clair's architecture and operation. Community Mailing List: clair-dev@googlegroups.com IRC: #clair on freenode.org Bugs: issues Contributing See CONTRIBUTING for details on submitting patches and the contribution workflow. License Clair is under the Apache 2.0 license. See the LICENSE file for details.
FEATURES
ALTERNATIVES
A JavaScript scanner built in PHP for scraping URLs and other information.
A hosted web application security testing tool that enables security researchers to register, activate their accounts, and scan web applications for vulnerabilities.
An Open Source supply chain security and auditing tool that tracks projects and dependencies, monitoring for vulnerabilities and issues.
CSET is a free software tool for identifying vulnerabilities in enterprise and industrial control cyber systems.
A search engine for the Internet of Things (IoT) that provides real-time information about connected devices.
A tool to capture all the git secrets by leveraging multiple open source git searching tools.
A vulnerability management tool for macOS that monitors and detects vulnerabilities in over 100 apps.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.