Protect the Software (PS)

Post Build Software Bill of Material Tools

• Anchore Syft
• Microsoft SBOM Tool
• OpenSSF SPDX
• bomctl

DAST

• OWASP Zap
• W3AF
• Arachni
• Nikto

Vulnerability Databases

• OSV.dev

Continuous Vulnerability Patch Management

• Ortelius

Application Security Compliance Reporting

• OpenSSF Scorecard