secure-software-development

Curating the best DevSecOps resources and tooling.

A multi-vault secret injection tool for safely injecting secrets into app environment

A controlled environment for demonstrating and understanding buffer overflow vulnerabilities in web applications. This project is designed for educational purposes as part of secure software development training.

Excalidraw library for threat modeling diagrams

DocF-Sec-Check helps to make your Dockerfile commands more secure.

🛡 Scan GitHub repositories for dependency vulnerabilities using OSV database. Supports npm, PyPI, RubyGems, Go, and PHP.

Vulnerable React/Next application

DSL Core - Specification for Audit-by-Design - Human & machine-readable domain-specific language (DSL) for defining, validating, and auditing software requirements. Open specification, free to use and extend.

The place where you will find all security related topics/tools/techniques made by developers for developers concerned about security.

A program that checks and removes unwanted input ensuring that data conforms to security-related requirements.

Fixing an Insecure Blog Application.

A security platform that watches, protects, and scales your microservices.

This project includes a Node.js backend service that provides APIs related to file storage, note storage, and authentication features. The main target of this application is to securely store data in storage. The project utilizes some secure software development methodologies.

Secure Software Development, Software Architecture, OOP, Software Product Line, UML Modeling

Offline-first Flutter voting app with tamper-evident vote chains, JWT/HMAC auth and WebSocket real-time results. Engineering thesis.

Web Apps book store for the course of secure software dev

Python-based secure coding review project demonstrating vulnerability identification and remediation techniques.

Building strong foundations in secure software development.

Secure ASP.NET Core and Blazor Server application for EV charging management, invoice generation, and CSV-based billing workflows.

Air-gapped AI-assisted software assurance platform that combines application context analysis, security tool orchestration, vulnerability correlation, attack-path reasoning, and human-in-the-loop validation.