Tag: DevSecOps

Discover Grype, the open-source vulnerability scanner from Anchore that finds CVEs in containers and filesystems in seconds. Complete guide with real code examples, installation steps, and comparisons.

Discover how OpenCVE, the open-source Vulnerability Intelligence Platform, automates CVE aggregation from MITRE, NVD, RedHat & more. Complete setup guide, code examples, and comparison with alternatives included.

Discover sbilly/awesome-security: the definitive GitHub collection of 500+ security tools, libraries, and resources that top cybersecurity professionals rely on. From network pentesting to threat intelligence, this curated repository transforms security tool discovery from chaos to clarity.

certctl is a free, self-hosted TLS certificate lifecycle platform that automates issuance, renewal, and deployment with zero human intervention. With 12 CA connectors, 15 deployment targets, agent-local key generation, and enterprise RBAC, it replaces $100K+/year commercial CLM solutions.

Discover Shannon, the autonomous AI pentester that executes real exploits against your web apps and APIs. With 96% exploit success rate and proof-of-concept reporting, it eliminates false positives and closes the security gap between annual pentests and daily deployments.

Discover how S3Scanner finds misconfigured S3 buckets across AWS, GCP, DigitalOcean & more. Complete guide with installation, real code examples, and advanced usage for security professionals.

Discover why elite developers abandoned scattered security docs for OWASP CheatSheetSeries. Your complete guide to effortless application security mastery with real code examples.

Discover how sast-skills transforms your LLM coding assistant into a free, powerful SAST scanner. Find 13 vulnerability classes including SQL injection, XSS, and business logic flaws with zero third-party tools.

agent-smith is an open-source AI-driven offensive security agent that transforms LLMs into autonomous pentesters. With 25+ skills, dynamic chaining, and end-to-end deliverables from PoCs to patches, it's redefining how security teams approach adversarial testing.