rubysec / ruby-advisory-db

A database of vulnerable Ruby Gems

wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

presidentbeef / brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

github / secure_headers

Manages application of security headers with many safe defaults

pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

inspec / inspec

InSpec: Auditing and Testing Framework

rubysec / bundler-audit

Patch-level verification for Bundler

ruby-oauth / oauth2

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

RoseSecurity / Red-Teaming-TTPs

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

ossf / best-practices-badge

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

noraj / haiti

:key: Hash type identifier (CLI & lib)

dradis / dradis-ce

Dradis Framework: Collaboration and reporting for IT Security teams

appvia / krane

Kubernetes RBAC static analysis & visualisation tool

anaynayak / aws-security-viz

Visualize your aws security groups.

basecamp / hotcell

☢️HotCell☢️ is an unprivileged sidecar container for handling untrusted inputs, purpose-built for Rails applications.