stevespringett

nist-data-mirror

A simple Java command-line utility to mirror the CVE JSON data from NIST.

disable-webassembly

Browser hacks to disable WebAssembly (WASM)

threatmodel-sdk

A Java library for parsing and programmatically using threat models

Alpine

An opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies

CPE-Parser

A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST

vulndb-data-mirror

A simple Java command-line utility to mirror the entire contents of VulnDB.

cvss-calculator

A Java library for calculating CVSSv2 and CVSSv3 scores and vectors

owasp-risk-rating-calculator

A Java library for programmatically calculating OWASP Risk Rating scores

headlines

A collection of HTTP response headers to elevate the security of your web app!

touchdraw-aws-stencil-library

Amazon Web Services Stencil Library for TouchDraw

maven-uuid-generator

The Maven UUID Generator Plugin generates a unique UUID for each build and assigns the value to project.build.uuid

cocoapods-dependencies

Shows a project's CocoaPods dependency graph

json-schema-for-humans

Quickly generate HTML documentation from a JSON schema

schemastore

A collection of JSON schema files including full API

stevespringett.github.io

.github

Community health files for the @GitHub organization

1password-teams-open-source

Get a free 1Password Teams membership for your open source project

ASVS

Application Security Verification Standard

commons-parent

Apache Commons Parent

owasp-change.github.io

An Open Letter to the OWASP Board

owasp-masvs

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

owasp.github.io

OWASP Foundation main site repository

SecureSoftwareSupplyChain

This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.

server-side-tls

Server side TLS Tools

startleft

StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different sources such as IaC files, diagrams or projects exported from Threat Modelling tools.

www-board-candidates

www-community

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

www-policy

www-project-juice-shop

OWASP Foundation Web Respository