Centralize Vulnerability Assessment and Management for DevSecOps Team

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

This project contains Terraform configuration files to provision infrastructure components required to deploy SAS Viya platform products on Google Cloud

The DevSecOps toolset for REST APIs

Azure Red Team tool for graphing Azure and Azure Active Directory objects

Deployment scripts & config for Sock Shop

The OWASP ZAP core project

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

Infection Monkey - An automated pentest tool

templates and scripts for deploying Azure Reference Architectures

This repository contains instructions to build a digital bank composed of a set of microservices that communicate with each other. Using Nodejs, Express, MongoDB and deployed to a Kubernetes cluste…

An automated adversary emulation system

Open Security Controls Assessment Language (OSCAL)

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

An information security preparedness tool to do adversarial simulation.

nodejsscan is a static security code scanner for Node.js applications.

the MiKTeX source code

Terraform AWS provider

The invoicer for Chapter 2 of Securing DevOps

This repo contains code and examples to operationalize Azure review checklists.

Cybersecurity Evaluation Tool

SIEM Tactics, Techiques, and Procedures

RAVEN is a flexible and multi-purpose probabilistic risk analysis, validation and uncertainty quantification, parameter optimization, model reduction and data knowledge-discovering framework.

Git client for ABAP