scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Audits JavaScript projects for known vulnerabilities and outdated package versions using OSS Index v3 REST API.
tfsec is being replaced by Trivy, a more comprehensive open-source security solution
A tool to find and search for registered CVEs, creating a local CVE database for offline use.
Automate your reconnaissance process with AttackSurfaceMapper, a tool for mapping and analyzing network attack surfaces.
A collection of SQL injection cheat sheets for various databases
A tool that finds unprotected secrets in container images or file systems, matching against a database of 140 secret types.
A runtime threat management and attack path enumeration tool for cloud-native environments
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.