Automate your software supply chain security by blocking malicious open source at the door. Sonatype Repository Firewall is a tool that helps you to block malicious open source components in your software supply chain. It integrates with your existing development workflow and provides real-time visibility into your open source components. It also helps you to enforce policy at scale and manage vulnerability risks. It is a part of the Sonatype platform that provides a comprehensive solution for software supply chain security. It is designed to work with a wide range of tools, languages, and packages. It is a must-have tool for any organization that wants to ensure the security of its software supply chain.
FEATURES
ALTERNATIVES
A Powershell script for assessing the security configurations of Siemens - SIMATIC PCS 7 OS client, OS Server or Engineering station.
A collection of resources for securing AWS environments using the CIS Amazon Web Services Foundations Benchmark 1.1
Python-based extension for integrating a Yara scanner into Burp Suite for on-demand website scans based on custom rules.
An Open Source supply chain security and auditing tool that tracks projects and dependencies, monitoring for vulnerabilities and issues.
A tool that detects dangling DNS records in a multi-cloud environment to prevent subdomain takeovers.
Cloud-based service for testing and analyzing Android and iOS apps for malware, vulnerabilities, and security threats.
Patch-level verification tool for bundler to check for vulnerable gems and insecure sources.
XGuardian XARA Security Scanner for OSX with URL scheme, Bundle ID, and keychain hijack checks.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.