Conviso
Conviso Application Security is a comprehensive application security platform that combines specialized services with software tools to help organizations identify, prioritize, eliminate, and prevent vulnerabilities throughout the software development lifecycle. The platform follows the secure software development journey, enabling organizations to manage the security posture of their applications while providing resources that complement developer experience and training. It's designed specifically to integrate security practices from the beginning of the development process. Conviso offers several key components: 1. Application Security Posture Management (ASPM) capabilities to assess and improve security across applications 2. Consulting services for building AppSec programs 3. Offensive security services including penetration testing 4. Cloud security assessments 5. Specialized AppSec training for development teams 6. Developer-focused tools created "by developers for developers" The platform aims to help organizations comply with information security regulations, foster a culture of secure development, and enhance the maturity of their security processes. It particularly targets financial institutions and companies handling sensitive data, helping them reduce costs associated with late vulnerability remediation while increasing the security maturity of their applications.
FEATURES
ALTERNATIVES
Prevents you from committing passwords and other sensitive information to a git repository.
A vulnerable by design infrastructure on Azure featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfigurations.
ARM TrustZone provides a secure execution environment for applications on ARM processors.
APKiD is a tool that identifies compilers, packers, obfuscators, and other weird stuff in APK files.
ffufai is an AI-enhanced wrapper for ffuf that automatically suggests file extensions for web fuzzing based on the target URL and headers.
A serverless application that demonstrates common serverless security flaws and weaknesses
An application security platform that provides runtime threat modeling, vulnerability management, and automated remediation workflows with a focus on identifying exploitable vulnerabilities in production environments.
Protect your Fastify server against CSRF attacks with a series of utilities and recommendations for secure application development.
PINNED
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.