OWASP Foundation
OWASP Foundation is a non-profit organization focused on improving the security of software. It provides a wide range of resources, including documentation, cheat sheets, and training, to help developers and security professionals improve the security of their applications. The organization is driven by volunteers and offers a variety of resources, including the Top Ten, ASVS, and cheat sheets, to help individuals improve the security of their applications. OWASP also hosts conferences and training events, such as the Global AppSec conference, to bring together security professionals and provide a platform for knowledge sharing and networking. The organization's mission is to make the internet a safer place by providing free and open-source resources to the global community.
FEATURES
SIMILAR TOOLS
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Simple script to check a domain's email protections and identify vulnerabilities.
Compares target's patch levels against Microsoft vulnerability database and detects missing patches.
Finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.
A continuous threat exposure management platform that provides automated vulnerability scanning for internet-facing assets with varying service tiers for different organizational needs.
Fuzzapi is a Rails application with a user-friendly UI for API_Fuzzer gem and Docker setup.
Patch-level verification tool for bundler to check for vulnerable gems and insecure sources.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.