Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

An Open Letter to the OWASP Board

A curated list of awesome tools for SQLAlchemy

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A lightweight workshop build on the shoulders of giants.

Sample cloud-native application with 10 microservices showcasing Kubernetes, Istio, gRPC and OpenCensus.

Lab Material for the Two-Day Defending Modern DevOps Environments Course

Kubernetes Security: from Image Hygiene to Network Policies

NCSC Guidance for secure development and deployment

An enterprise social network

Base application for Ruby on Rails 5 projects. Built to minimize the time spent writing boilerplate code and performing repetitive setup tasks.

A terraform module to provide a VPC in AWS.

A vulnerable version of Rails that follows the OWASP Top 10

Android App Security Checklist

Checklist of security precautions for Ruby on Rails applications.

A Collection of Secure Mobile Development Best Practices

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Omniauth strategy for the Auth0 platform.

Flashpaper is a simple go-based service for creating one time use links to text data or individual files.

A list of security blogs.