{"repo":"deepfence/ThreatMapper","free":true,"listed":false,"github":"https://github.com/deepfence/ThreatMapper","clone":"git clone https://github.com/deepfence/ThreatMapper.git","description":"Open Source Cloud Native Application Protection Platform (CNAPP)","language":"TypeScript","stars":5312,"topics":["cloud-native","vulnerability-management","threat-analysis","devsecops","secops","registry-scanning","security-tools","cwpp","observability","cloudsecurity"],"license":"Apache-2.0","category":"analytics","readme_excerpt":"ThreatMapper - Runtime Threat Management and Attack Path Enumeration for Cloud Native [!NOTE] This project is maintained by https://threatmapper.org Deepfence ThreatMapper hunts for threats in your production platforms, and ranks these threats based on their risk-of-exploit. It uncovers vulnerable software components, exposed secrets and deviations from good security practice. ThreatMapper uses a combination of agent-based inspection and agent-less monitoring to provide the widest possible coverage to detect threats. With ThreatMapper's ThreatGraph visualization, you can then identify the issues that present the greatest risk to the security of your applications, and prioritize these for planned protection or remediation. Learn more about ThreatMapper in the product documentation. See ThreatMapper running in the live demo sandbox. When to use ThreatMapper ThreatMapper carries on the good 'shift left' security practices that you already employ in your development pipelines. It continues to monitor running applications against emerging software vulnerabilities, and monitors the host and cloud configuration against industry-expert benchmarks. Use ThreatMapper to provide security observability for your production workloads and infrastructure, across cloud, kubernetes, serverless (Fargate) and on-prem platforms. Planning your Deployment ThreatMapper consists of two components: The ThreatMapper Management Console is a container-based application that can be deployed on a single doc","default_branch":null,"files":null,"tree":[],"storefront":"/r/deepfence","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/deepfence/ThreatMapper/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}