Tools
DependencyCheck
dependency-check/DependencyCheck
OWASP Dependency-Check is a software composition analysis tool that scans project dependencies, matches them against CVE data, and reports publicly disclosed vulnerabilities.
Topics
Related projects
vulscan3.8kVulscan is an Nmap NSE module that turns version detection into vulnerability identification by matching services against bundled offline vulnerability databases.
graudit1.7kA lightweight source-code auditing tool that uses grep and language-specific regex signature databases to flag potential security flaws from the command line.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
nuclei32.9kA fast, template-driven vulnerability scanner that uses a simple YAML DSL to detect CVEs, misconfigurations, and other security issues across web apps, networks, and cloud environments.
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.