Tools
dependency-track
DependencyTrack/dependency-track
A self-hosted software supply chain analysis platform that uses SBOMs to identify components and known vulnerabilities across projects, helping teams manage open-source dependency risk.
Topics
Related projects
npq1.8kA CLI that audits npm packages before installation, checking vulnerabilities, age, popularity, install scripts and provenance to reduce supply-chain risk.
CheatSheetSeries34kThe official OWASP Cheat Sheet Series, a concise collection of high-value application security guidance and best practices organized by topic.
zaproxy16.2kZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.
oss-fuzz12.9kGoogle's continuous fuzzing service for open-source software, running modern fuzzers at scale to uncover security vulnerabilities and stability bugs.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.