Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

The security workflow engine!

Deep cybersecurity research agent for your cloud, code and runtime - ask your infrastructure anything. Read-only, sandboxed.

Damn Vulnerable SCA Application

Curated resources for the EU Cyber Resilience Act (Regulation 2024/2847): regulation, harmonised standards, EUCC, SBOM, vulnerability management, conformity assessment

📚A curated list of product security resources.

Custom gitleaks configuration

Managing GitHub Advanced Security (GHAS) Controls at Scale

Python SDK for the Finite State Platform API

Browser-based Yocto CVE dashboard for analyzing cve-summary.json, reviewing embedded Linux vulnerabilities, and exporting HTML/PDF security reports.

Self-hosted open-source cybersecurity governance platform for ISO 27001, NIS2, DORA, CRA, product security and AI governance.

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Product Security in Cybersecurity.

Collection of insights and recommendations gathered from my time working in security.

A Berserker Code Security Scanner

AS{2} aims to provide visibility, compliance, alerting, and reporting capabilities. The primary focus is to integrate open-source tools used by AppSec teams in one place with better visibility.

Public CRA Direct documentation for SBOM evidence, Article 14 workflows, HITL review, and audit trails.

Security Research and PoC

20 hands-on security engineering labs covering attack surface discovery, reverse engineering, protocol analysis, fuzzing, CVSS scoring, and responsible disclosure.

Threat model and security analysis for STEVAL-SENSORTILEBOX product from ST Microelectronics