CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +37 frameworks worldwide: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber and so much more

GSoC 2022 Project testing CVEs against CRS

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Parser and evaluator for Content Security Policy directives.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

.NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)

OWASP CRS (Official Repository)

I love to teach dotnet concepts in a simple way with real world examples to people who aspire to to be a dotnet developer. I also help developers to refresh their memory with easy to understand analogy.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

The OWASP Secure Headers Project

completely ridiculous API (crAPI)

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

Python implementation of OWASP CycloneDX

Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

This Risk Rating Calculator is based on OWASP's Risk Rating Methodology

DevSecOps, ASPM, Vulnerability Management. All on one platform.

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.