Skip to content
You must be logged in to sponsor prabhu

Become a sponsor to prabhu

I am building several application security and threat intelligence tools under the umbrella "AppThreat". Some of my work includes

  • dep-scan - Fully open-source security audit based on known vulnerabilities and advisories for project dependencies. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI, and Google CloudBuild. No server is required!
  • cdxgen - a tool to effortlessly produce software bill-of-materials and submit to a suitable server such as dependency-track for open-source software (OSS) scanning

Current sponsors 1

@webdevred

Featured work

  1. AppThreat/vulnerability-db

    Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

    Python 155
  2. owasp-dep-scan/blint

    blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.

    Python 467
  3. AppThreat/atom

    atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

    Scala 100
  4. AppThreat/chen

    Code Hierarchy Exploration Net (chen)

    Scala 37
  5. owasp-dep-scan/dosai

    Dotnet Source and Assembly Inspector (Dosai) is a tool to list details about the namespaces and methods from sources and assemblies.

    C# 14
  6. cdxgen/caxa

    Package Node.js applications into executable binaries.

    Rust 13

Select a tier

$ a month

A Public Sponsor achievement will be added to your profile.

$2,000 a month

Select

This tier would provide your organization up to 10 monthly hours for any supply-chain security consultancy and advice.