AppSOC Integrations

Hub Component Risk

Featured

by

Black Duck

Provides risk assessments open-source components analyzing vulnerabilities, license risks, and operational risks.

Terrascan

Featured

by

Tenable

Detects compliance violations across Infrastructure-as-Code before provisioning cloud infrastructure.

detect-secrets

Featured

by

Yelp

Prevents sensitive information such as passwords, API keys, and tokens from being committed to version control systems.

Wapiti Scanner

Featured

by

Wapiti

Open-source vulnerability scanner with black-box testing, identifying security flaws such as SQL injection and XSS.

Horusec

Featured

by

Zup Innovation

Analyzes source code for vulnerabilities to identify and fix security issues early in the development process.

yarn audit

Featured

by

Yarn

Learn about yarn audit integration with AppSOC, enhancing your security by consolidating data and prioritizing critical threats. Contact us for a demo today.

SAST (JSON)

Featured

by

Veracode

Scans source code, binaries, and bytecode to identify security vulnerabilities without executing the application.

Wfuzz

Featured

by

Xavi Mendez

Tool for brute-forcing or fuzzing web applications to identify security vulnerabilities and issues such as XSS or SQLI.

Prowler

Featured

by

Verica

Open-source tool for AWS environments for security assessments, hardening guidance, and compliance auditing.

DSOP

Featured

by

US DoD

SAST framework tailored for the U.S. DoD that identifies vulnerabilities in source code during development.

SCA (JSON)

Featured

by

Veracode

Identifies vulnerabilities in open-source components to manage security risks associated with these libraries.

Testssl.sh

Featured

by

TestSSL

Analyzes of SSL/TLS configurations, checking the protocols, ciphers, and cryptographic flaws in HTTPS connections.

HuskyCL

Featured

by

HuskyCL

Open-source tool that performs security tests inside CI/CD pipelines to identify vulnerabilities before deployment.

Pentest-as-a-Service

Featured

by

HackerOne

Vulnerability coordination and bug bounty platform that connects businesses with cybersecurity researchers.

CSPM

Featured

by

Wiz

Visibility and security for cloud environments by identifying risks across applications, networks, and configurations.

VulDB Vulnerability Database

Featured

by

VulDB

Database with detailed information on security vulnerabilities, risk assessments, affected systems, and available patches.