Tools

bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

lirantal/awesome-nodejs-security

Curated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…

offensive360/mcp-server

MCP server that runs SAST scans on local codebases and returns findings with severity and fixes, enabling AI assistants to perform security analysis…

offensive360/sast-scan-action

GitHub Action: Offensive360 SAST scan with SARIF output for code scanning. 60+ languages. Free for open source.

zappaboy/vuln-scanner

Vulnerability Assessment Scanner with Report Generation

owasp/devsecopsguideline

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

owasp/abap-code-scanner

ABAP Code Analyzer

owasp/secure-coding-practices-quick-reference-guide

The Secure Coding Practices Quick-reference Guide from OWASP

owasp/asst

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

0x999-x/jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

merbinr/cve-2023-31606

Documentation of CVE-2023-31606: a ReDoS vulnerability in Redcloth gem's sanitize_html function, with root cause analysis, CVSS 7.5 scoring, and…

security-code-scan/security-code-scan

Vulnerability Patterns Detector for C# and VB.NET

owasp/wpbullet

Static code analysis scanner for WordPress plugins and themes. Detects vulnerabilities like XSS and SQL injection via modular, extensible…

owasp/riskassessmentframework

The Secure Coding Framework