All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,788
- 1,325
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 22,561–22,584 of 31,788 skills
- Assess Prioritize And RemediateHelp ensure that vulnerabilities are remediated in accordance with risk to reduce the window of opportunity for attackers.Votes: 0GitHub stars: 3,518
- Analyze Vulnerabilities To IdentifyHelp reduce the frequency of vulnerabilities in the future.Votes: 0GitHub stars: 3,518
- RV.3.4 Rv34Review the SDLC process, and update it if appropriate to prevent (or reduce the likelihood of) the root cause recurring in updates to the software orVotes: 0GitHub stars: 3,518
- RV.3.3 Rv33Review the software for similar vulnerabilities to eradicate a class of vulnerabilities, and proactively fix them rather than waiting for external repVotes: 0GitHub stars: 3,518
- RV.3.2 Rv32Analyze the root causes over time to identify patterns, such as a particular secure coding practice not being followed consistently.Votes: 0GitHub stars: 3,518
- RV.3.1 Rv31Analyze identified vulnerabilities to determine their root causes.Votes: 0GitHub stars: 3,518
- RV.2.2 Rv22Plan and implement risk responses for vulnerabilities.Votes: 0GitHub stars: 3,518
- RV.2.1 Rv21Analyze each vulnerability to gather sufficient information about risk to plan its remediation or other risk response.Votes: 0GitHub stars: 3,518
- RV.1.3 Rv13Have a policy that addresses vulnerability disclosure and remediation, and implement the roles, responsibilities, and processes needed to support thatVotes: 0GitHub stars: 3,518
- RV.1.2 Rv12Review, analyze, and/or test the software’s code to identify or confirm the presence of previously undetected vulnerabilities.Votes: 0GitHub stars: 3,518
- RV.1.1 Rv11Gather information from software acquirers, users, and public sources on potential vulnerabilities in the software and third-party components that theVotes: 0GitHub stars: 3,518
- Test Executable Code To IdentifyHelp identify vulnerabilities so that they can be corrected before the software is released in order to prevent exploitation.Votes: 0GitHub stars: 3,518
- Review The Software Design To VerifyHelp ensure that the software will meet the security requirements and satisfactorily address the identified risk information.Votes: 0GitHub stars: 3,518
- Review And Or Analyze Human ReadableHelp identify vulnerabilities so that they can be corrected before the software is released to prevent exploitation.Votes: 0GitHub stars: 3,518
- Reuse Existing Well Secured SoftwareLower the costs of software development, expedite software development, and decrease the likelihood of introducing additional security vulnerabilit...Votes: 0GitHub stars: 3,518
- Design Software To Meet SecurityIdentify and evaluate the security requirements for the software;Votes: 0GitHub stars: 3,518
- Create Source Code By Adhering ToDecrease the number of security vulnerabilities in the software, and reduce costs by minimizing vulnerabilities introduced during source code creationVotes: 0GitHub stars: 3,518
- Configure The Compilation InterpreterDecrease the number of security vulnerabilities in the software and reduce costs by eliminating vulnerabilities before testing occurs.Votes: 0GitHub stars: 3,518
- Configure Software To Have SecureHelp improve the security of the software at the time of installation to reduce the likelihood of the software being deployed with weak security settiVotes: 0GitHub stars: 3,518
- PW.9.2 Pw92Implement the default settings (or groups of default settings, if applicable), and document each setting for software administrators.Votes: 0GitHub stars: 3,518
- PW.9.1 Pw91Define a secure baseline by determining how to configure each setting that has an effect on security or a security-related setting so that the defaultVotes: 0GitHub stars: 3,518
- PW.8.2 Pw82Scope the testing, design the tests, perform the testing, and document the results, including recording and triaging all discovered issues and recommeVotes: 0GitHub stars: 3,518
- PW.8.1 Pw81Determine whether executable code testing should be performed to find vulnerabilities not identified by previous reviews, analysis, or testing and, ifVotes: 0GitHub stars: 3,518
- PW.7.2 Pw72Perform the code review and/or code analysis based on the organization’s secure coding standards, and record and triage all discovered issues and recoVotes: 0GitHub stars: 3,518