A course on securecoding

OWASP BLT is a bug logging tool to report issues and get points, companies are held accountable.

PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.

BigBang the product

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

WireGuard®-based zero-trust access platform with OIDC auth, identity sync, and NAT traversal.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Chainloop is an Open Source evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, CSAF files, QA reports, and more.

Find and verify secrets

Base de connaissances en cybersécurité

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

A collection of technical and sales resources related to Prisma Cloud Compute and Prisma Cloud Enterprise created for the PANW Channel Partner Ecosystem and other engineers working with the solution

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Open Source Cloud Native Application Protection Platform (CNAPP)

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Akeyless Kubernetes Helm charts