Security Tools and Resources
Engineer/DeveloperSecurity Specialist
No contributors yet. Be the first to contribute!
🔑 Key Takeaway: Use established scanners and curated tool lists as inputs to a testing program. Tools without process and owners do not equal coverage.
There are a very large number of security tools and resources available, and sometimes it can feel overwhelming.
There is a wide range of security tools to test your web & mobile applications, such as OWASP ZAP or Burp Suite to scan your application for vulnerabilities, Snyk to check your dependencies, or MobSF for security analysis on Android/iOS applications.
For web3, there is also a wide range of tools. Rather than listing specific tools, we are providing links to repositories listing many of these tools:
- https://github.com/safful/Web3-Security-Tools
- https://github.com/OffcierCia/On-Chain-Investigations-Tools-List
- https://github.com/shanzson/Smart-Contract-Auditor-Tools-and-Techniques
- https://github.com/Anugrahsr/Awesome-web3-Security
Further Reading
- Front End Web App overview: how the pages of this framework fit together
- Security Testing overview: the process these tools plug into
- Dependency Awareness: what dependency scanners are actually looking for
- OWASP Web Security Testing Guide: a test methodology to run tools against