ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

Automate open source license compliance and ensure software supply chain integrity

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

Python SDK for the Finite State Platform API

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

prancer platform is an IaC Security engine + Continuous Compliance for your cloud (Azure, AWS, GCP) and Kubernetes environment

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.

A Python client for the Revenera Flexera Code Insight

Python Elliptic Curve Side-Channel Analysis toolkit.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

QSCAT is a QGIS plugin for shoreline change analysis (SCA).

CLI Security Tool for SAST & SCA

A source code static analysis platform for AppSec enthusiasts.

Code Insight report showing project vulnerabilities

Network Packet Analyzer

Project comparison report for Code Insight

fafnir-sec is an open-source tool that allows for the complete automation of launching different security tools detecting vulnerabilities in the application's code.

This is a project inventory report example showing license and vulnerability details.

Repo for testing SCA and DAST in AWS

Discrete signal processing tool for side chanel data leakage attacks and analysis. Air-gapped keylogger PoC.