appsec.md

Threat Modeling

• Awesome Threat Modeling
• Threat Modeling Manifesto

Tools

• Threat Composer

Open Source Static Analysis

• Semgrep
• gokart

Programs

• Gitlab Security Engineering
• A Warrior's Journey: Building a Global AppSec Program - OWASP Global AppSec 2020

Standards & Maturity Models

• Building Security In Maturity Model compared to Software Assurance Maturity Model
• Comparing SAMM & BSIMM models
• SAMM and BSIMM: Which Should I Choose
• A Survey and Comparison of Secure Software Development Standards

The standards

• OWASP SAMM
• BSIMM

AppSec Pipelines

• Making Continuous Security a Reality with OWASP’s AppSec Pipeline - Matt Tesauro & Aaron Weaver
• OWASP Appsec Pipeline

Product Classes

RASP

• OpenRASP

DevSecOps - integrated platforms

• ZeroNorth

Threat Modeling

• IriusRisk
• Pythonic framework for threat modeling