awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
https://github.com/devsecops/awesome-devsecops

Last synced: about 4 hours ago
JSON representation

Threat Intelligence
- Alien Vault OTX
- Alien Vault OTX
- Critical Stack
- IBM X-Force
- OpenTPX
- Passive Total
- Threat Connect
Guidelines
- Introduction to DevSecOps - DZone Refcard
- Introduction to security testing and tools
- Security Champions Playbook
- Security Guide for Web Developers
- A practical guide to build DAST with OWASP Zap
- DevSecOps Hub
Presentations
- DevSecOps: Taking a DevOps Approach to Security
- Mozilla's Test Driven Security in Continuous Integration
- Security DevOps - staying secure in agile projects
- Veracode's Defending the Cloud from a Full Stack Hack
- Put Your Robots to Work: Security Automation at Twitter
- The Three Faces of DevSecOps
- DevSecOps: Taking a DevOps Approach to Security
Initiatives
- AWS Labs
- DevOps and Audit Resources
- DevSecOps
- OpenDevSecOps
- Rugged DevOps
- AWS Labs
Keeping Informed
- AWS Security
- Azure Security
- Ruby Weekly
- Security Newsletter
- SRE Weekly
- Azure Security
Wardley Maps for Security
- Check out Figure 6 for Comparisons
- Introduction to Wardley Maps
- Security Industry Example
- SOC Value Chain & Delivery Models
- DevSecOps Repo for Security Maps
Labs
- Exercism
- Infoseclabs
- Pentester Lab
- Vulnhub
- Infoseclabs
- Infoseclabs
Vulnerable Test Targets
- Damn Vulnerable Web Application
- Metasploitable
- Mutillidae
Conferences
- AWS re:Inforce
- AWS re:Invent
- DevOps Connect
- DevOps Days
- IP Expo
- ISACA Ireland
- RSA Conference
- All Day DevOps
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- DevOps Connect
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
- IP Expo
Podcasts
- Arrested DevOps
- Brakeing Down Security Podcast
- Darknet Diaries
- Defensive Security Podcast
- DevOps Cafe
- Down The Security Rabbithole
- Food Fight Show
- OWASP 24/7
- Risky Business
- Social Engineering Podcast
- Software Engineering Radio
- Take 1 Security Podcast
- Tenable Security Podcast
- The Secure Developer
- Darknet Diaries
- The Secure Developer
Books
- DevOpsSec
- Docker Securitiy - Quick Reference
- Holistic Info-Sec for Web Developers
- Securing DevOps
- The DevOps Handbook (Section VI)
Dashboards
- Grafana
- Kibana
- Grafana
Hunting
- Mirador
- moloch
- osquery
Testing
- Brakeman
- Contrast Security
- David
- Gauntlt
- Hakiri
- Infer
- IronWASP
- Lynis
- Node Security Platform
- npm-check
- npm-outdated
- OWASP OWTF
- OWASP ZAP
- PureSec (Serverless Security)
- RIPS
- ShiftLeft Scan
- Snyk
- SourceClear
- Snyk
Alerting
- 411
- Alerta
Attack Modeling
- CAPEC
- IriusRisk
- Larry Osterman's Threat Modeling
- Threat Risk Modeling
Secret Management
- Keybase
- Sops
- Vault
Visualization
- Gephi
- Wazuh
Sharing
- Gitbook
- Speaker Deck
ChatOps
- Gitter
- HipChat
- MatterMost
- Riot
- Slack
Red Team
- EyeWitness

Programming Languages

Python 1 Shell 1

Categories

Conferences 46 Testing 19 Podcasts 16 Presentations 7 Threat Intelligence 7 Labs 6 Initiatives 6 Guidelines 6 Keeping Informed 6 Wardley Maps for Security 5 Books 5 ChatOps 5 Attack Modeling 4 Dashboards 3 Hunting 3 Secret Management 3 Vulnerable Test Targets 3 Sharing 2 Visualization 2 Alerting 2 Red Team 1

Sub Categories

Keywords

security-testing 1 owasp 1 docker-image 1 ci 1 security-checklist 1 security-book 1 security 1 books 1 api 1