Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.

A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0

🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.

A small tool to help developers understand a huge set of security requirements from appsec teams

OWASP ASVS Security Evaluation Templates with Nuclei

Penetration Testing Checklist

OWASP Application Security Verification Standard 4.0 Checklist

OWASP Thick Client Application Security Verification Standard

Assessors Studio operationalizes CycloneDX Attestations (CDXA): perform assessments, collect evidence, make claims, and issue machine-readable CycloneDX attestations, optionally legally binding for B2B and B2G use cases.

A team of Claude Code sub-agents that enforce security across the full SDLC, from ASVS requirements and threat modelling to SAST triage, IaC review, compliance attestation and release sign-off. Drop into any project. No security team required.

Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping

Repository is based on OWASP Application Security Verification Standard 3.1

🥊 Automagically select the top ASVS security controls for a given Abuse Case using NLP.

A set of functions for effective ASV filtering in eDNA metabarcoding data on the basis of GMM

Improved bee microbiota characterization using routine 16S rRNA gene sequencing 🐝🧬

🐀 Import ASVS controls to SecurityRAT in the blink of an eye.

Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/

Multi-framework compliance orchestrator (OSS-license, OWASP ASVS, ISO 27001, SOC 2, GDPR) for repo and CI/CD. One GitHub Action; five frameworks; cross-mapped findings.