API Security is a comprehensive solution that provides continuous discovery, vulnerability assessment, threat detection, compliance monitoring, dynamic testing, and remediation capabilities…
#devsecops tools
53 results
API security platform that combines discovery, testing, and monitoring capabilities to identify and protect against API vulnerabilities throughout the development lifecycle.
A GitHub App that monitors GitHub organizations or repositories for adherence to security best practices and detects policy violations.
An automated code remediation tool that integrates with source control platforms to automatically fix security vulnerabilities in code through AI-driven analysis and one-click implementatio…
Anchore Enterprise is a platform that protects and secures software supply chains end-to-end.
Apiiro ASPM Platform is an application security solution that provides code-to-runtime visibility, risk assessment, and remediation capabilities to help organizations manage and reduce secu…
A cloud security platform that combines Kubernetes security scanning, runtime monitoring, and cloud security posture management using Kubescape and eBPF technology.
A tool to conduct preliminary security checks in code, infrastructure, or IAM configurations using various open-source tools.
Collection of scripts and resources for DevSecOps, Security Automation and Automated Incident Response Remediation.
Black Duck is an application security platform that provides software composition analysis and supply chain security capabilities to identify vulnerabilities, ensure license compliance, and…
A free training course and lab environment for learning to test and attack cloud infrastructure, including AWS and Azure.
A Dynamic Application Security Testing (DAST) platform that provides automated security testing for web applications, APIs, and LLM-powered applications throughout the software development…
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
A DevSecOps command line asset inventory tool
An Application Security Posture Management platform that helps organizations integrate security throughout the software development lifecycle with a focus on vulnerability management and se…
A tool for static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers
An integrated application security platform that combines software composition analysis, container scanning, and runtime security monitoring to identify and prioritize vulnerabilities based…
DerScanner is a comprehensive application security testing platform that combines SAST, DAST, MAST, SCA, and Binary Analysis capabilities with support for on-premises deployment and CI/CD i…
A compilation of suggested tools for each component in a detection and response pipeline, with real-world examples, to design effective threat detection and response pipelines.
Docker's Actuary automates security best-practices checks for Docker containers.
Create Docker container images for testing and long-term use.
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
An application security testing platform that combines automated scanning, AI assistance, and manual expert testing to provide continuous security assessment throughout the software develop…
A security analysis platform that combines SAST, SCA, SBOM generation and AI-assisted remediation to detect and fix vulnerabilities during the software development lifecycle.
Load more tools
Showing 24 of 53