Clair
Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent. The book contains all the documentation on Clair's architecture and operation. Community Mailing List: clair-dev@googlegroups.com IRC: #clair on freenode.org Bugs: issues Contributing See CONTRIBUTING for details on submitting patches and the contribution workflow. License Clair is under the Apache 2.0 license. See the LICENSE file for details.
FEATURES
ALTERNATIVES
A tool that showcases the attack surface of a given Android device, highlighting potential vulnerabilities and security risks.
A collection of resources for securing AWS environments using the CIS Amazon Web Services Foundations Benchmark 1.1
A tool that uses NLP and ML to identify potential software vulnerabilities from git commit messages
Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.
Compares target's patch levels against Microsoft vulnerability database and detects missing patches.
![GoatseLinux: It's Wide Open [tm] GSL Logo](/_next/image?url=https%3A%2F%2Fkcjlih8bwjd7vpzd.public.blob.vercel-storage.com%2Ficon-C3N70BiSYlBtat0YrXUygAEzNLFIXF.webp&w=64&q=75){kind=small}
A VMware image for penetration testing purposes
A tool to find and search for registered CVEs, creating a local CVE database for offline use.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.