Clair
0 (0)
An open source project for static analysis of vulnerabilities in application containers
kube-hunter hunts for security weaknesses in Kubernetes clusters. The tool was developed to increase awareness and visibility for security issues in Kubernetes environments. You should NOT run kube-hunter on a Kubernetes cluster that you don't own! Run kube-hunter: kube-hunter is available as a container (aquasec/kube-hunter), and we also offer a web site at kube-hunter.aquasec.com where you can register online to receive a token allowing you to see and share the results online. You can also run the Python code yourself as described below. Explore vulnerabilities: The kube-hunter knowledge base includes articles about discoverable vulnerabilities and issues. When kube-hunter reports an issue, it will show its VID (Vulnerability ID) so you can look it up in the KB at https://aquasecurity.github.io/kube-hunter/
An open source project for static analysis of vulnerabilities in application containers
A curated list of known malicious NPM packages
Patch-level verification tool for bundler to check for vulnerable gems and insecure sources.
FullHunt is a next-generation attack surface security platform that enables companies to discover, monitor, and secure their external attack surfaces.
NoSQLMap is a Python tool for auditing and automating injection attacks on NoSQL databases.
An extensible, heuristic-based vulnerability scanning tool for installed npm packages.