Threat Modeling: We will help with the development of the crucial requirements to processes and the security side of the product. Due to DevSecOps services we will help choosing and configuring the best tool for threat modeling in your particular case (IriusRisk, OWASP Threat Dragon, Pytm, Materialize threats tool)

Testing: Implementing the testing tools in the development pipeline:

• SAST (Static Analysis Tools, OWASP Source Code Analysis Tools, Gerrit, Salus)
• SCA (Dependency Check/Dependency Track, Snyk, Sonatype OSS/Nexus IQ)
• Secrets search (git-secrets, Gitleaks,TruffleHog)
• DAST (Arachni, OWASP ZAP, Gauntlt)

Docker build: Carrying out a Configure vulnerability audit of your docker images (Clair+Klar, Trivy, Docker bench)

K8s security: We’ll provide security of your k8s cluster (kube-bench, kube-hunter, krane, statboard, falco)

IaC Security: We’ll describe your infrastructure with the most secure code (Checkov, Tfsec, Kubeval)

Cloud security: Protecting your cloud infrastructure (CloudSploit, ScoutSuite)

Security Chaos Engineering: Stress and load testing of your system (Kube-monkey, Security Monkey)

RASP: Ready to block attacks in real time (openrasp, falco)

Vulnerability Management: Providinge a suitable tool to manage identified vulnerabilities (DefectDojo, Archery, Faraday)