All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,697
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 21,793–21,816 of 31,697 skills
- SA 11(6) Attack Surface ReviewsRequire the developer of the system, system component, or system service to perform attack surface reviews.Votes: 0GitHub stars: 3,518
- SA 11(5) Penetration TestingRequire the developer of the system, system component, or system service to perform penetration testing: At the following level of rigor: [organizatioVotes: 0GitHub stars: 3,518
- SA 11(4) Manual Code ReviewsRequire the developer of the system, system component, or system service to perform a manual code review of [organization-defined] using the followingVotes: 0GitHub stars: 3,518
- SA 11(1) Static Code AnalysisRequire the developer of the system, system component, or system service to employ static code analysis tools to identify common flaws and document thVotes: 0GitHub stars: 3,518
- SA 10 Developer Configuration ManagementRequire the developer of the system, system component, or system service to: Perform configuration management during system, component, or service [orVotes: 0GitHub stars: 3,518
- SA 10(6) Trusted DistributionRequire the developer of the system, system component, or system service to execute procedures for ensuring that security-relevant hardware, software,Votes: 0GitHub stars: 3,518
- SA 10(4) Trusted GenerationRequire the developer of the system, system component, or system service to employ tools for comparing newly generated versions of security-relevant hVotes: 0GitHub stars: 3,518
- SA 10(3) Hardware Integrity VerificationRequire the developer of the system, system component, or system service to enable integrity verification of hardware components.Votes: 0GitHub stars: 3,518
- Ra 6 Technical SurveillanceEmploy a technical surveillance countermeasures survey at [organization-defined] [organization-defined].Votes: 0GitHub stars: 3,518
- Ra 5 Vulnerability Monitoring AndMonitor and scan for vulnerabilities in the system and hosted applications [organization-defined] and when new vulnerabilities potentially affectin...Votes: 0GitHub stars: 3,518
- Ra 5 7 Automated Detection AndAutomated Detection and Notification of Unauthorized ComponentsVotes: 0GitHub stars: 3,518
- Ra 5 2 Update Vulnerabilities To BeUpdate the system vulnerabilities to be scanned [organization-defined].Votes: 0GitHub stars: 3,518
- RA 9 Criticality AnalysisIdentify critical system components and functions by performing a criticality analysis for [organization-defined] at [organization-defined].Votes: 0GitHub stars: 3,518
- RA 8 Privacy Impact AssessmentsConduct privacy impact assessments for systems, programs, or other activities before: Developing or procuring information technology that processes peVotes: 0GitHub stars: 3,518
- RA 7 Risk ResponseRespond to findings from security and privacy assessments, monitoring, and audits in accordance with organizational risk tolerance.Votes: 0GitHub stars: 3,518
- RA 5(9) Penetration Testing And AnalysesPenetration Testing and AnalysesVotes: 0GitHub stars: 3,518
- RA 5(8) Review Historic Audit LogsReview historic audit logs to determine if a vulnerability identified in a [organization-defined] has been previously exploited within an [organizatioVotes: 0GitHub stars: 3,518
- RA 5(6) Automated Trend AnalysesCompare the results of multiple vulnerability scans using [organization-defined].Votes: 0GitHub stars: 3,518
- RA 5(5) Privileged AccessImplement privileged access authorization to [organization-defined] for [organization-defined].Votes: 0GitHub stars: 3,518
- RA 5(4) Discoverable InformationDetermine information about the system that is discoverable and take [organization-defined].Votes: 0GitHub stars: 3,518
- RA 5(3) Breadth And Depth Of CoverageDefine the breadth and depth of vulnerability scanning coverage.Votes: 0GitHub stars: 3,518
- RA 5(11) Public Disclosure ProgramEstablish a public reporting channel for receiving reports of vulnerabilities in organizational systems and system components.Votes: 0GitHub stars: 3,518
- RA 5(10) Correlate Scanning InformationCorrelate the output from vulnerability scanning tools to determine the presence of multi-vulnerability and multi-hop attack vectors.Votes: 0GitHub stars: 3,518
- RA 5(1) Update Tool CapabilityUpdate Tool CapabilityVotes: 0GitHub stars: 3,518