DevSecOps Tools

This page contains my favorite DevSecOps tools. I will update it regularly.

Vulnerability Management

• DefectDojo - Vulnerability management tool

Static Analysis Tools

• Semgrep - Static analysis tool
• GoSec - Golang security checker

Dynamic Analysis Tools

• ZAP Proxy - Zed Attack Proxy
• Burp Suite - Web application security testing tool
• FFuf - Fast web fuzzer

SCA Tools

• OWASP Dependency Track - Software Composition Analysis tool