Tools
find-sec-bugs
find-sec-bugs/find-sec-bugs
A SpotBugs plugin for security audits of Java and Android applications, adding taint analysis and detectors for injections, hardcoded secrets and other common flaws.
Topics
Related projects
cryptomator16.5kCryptomator provides transparent, client-side encryption for files stored in cloud services such as Dropbox, Google Drive and OneDrive. Its cross-platform desktop apps encrypt file contents and names, giving users private, local control over data before it reaches the cloud.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
DependencyCheck7.8kOWASP Dependency-Check is a software composition analysis tool that scans project dependencies, matches them against CVE data, and reports publicly disclosed vulnerabilities.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.
faraday6.8kFaraday is an open-source vulnerability management platform that aggregates and normalizes results from many scanners, adding multiuser collaboration, visualization, and reporting.
django-DefectDojo5.2kDefectDojo is an open-source vulnerability management and ASPM platform. It ingests findings from many security scanners, then handles deduplication, tracking, remediation and reporting through a self-hosted web interface.