
TCASVS
OWASP Thick Client Application Security Verification Standard

OWASP Thick Client Application Security Verification Standard

SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)

Web-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.

OWASP Kubernetes security and compliance tool [WIP]

Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …

Multi-VLAN virtual network across 10 VMs: GRE tunneling, nftables firewall, Active Directory, BIND9 DNS, Kea DHCP, Docker web services, SMB file…

Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF (with OWASP CRS). Case study: Spring4Shell…

OWASP SAPKiln is a graphical user interface (GUI) tool designed to facilitate securing and auditing SAP systems effectively.

OWASP IoT Security Verification Standard (ISVS)

Software Component Verification Standard (SCVS)

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

A documentation and tracking project with the goal of making package management systems more secure.

Getting a handle on container security

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…

Unified security scanner for MCP servers with config, pentest, and repo-scan modes. Generates SARIF reports for CI/CD integration, detects secrets,…

Vulnerability Assessment Scanner with Report Generation

CyberArk Security Audit

Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy (CSP) header of a given web application.