Skip to content

Latest commit

 

History

History
40 lines (27 loc) · 1.89 KB

index.md

File metadata and controls

40 lines (27 loc) · 1.89 KB
layout title tags project level type pitch
col-sidebar
OWASP SecurityRAT
securityrat
true
2
tool
OWASP SecurityRAT is a tool used by development teams, helping them master security requirements during development.

OWASP Incubator Stars Release

Tool mission

Simplify security requirement management during development using automation approaches.

Description

The core functionality of SecurityRAT ("Security Requirement Automation Tool") can be described in the following steps:

  1. You tell SecurityRAT what kind of a software artifact you're going to develop / are running
  2. SecurityRAT tells you which requirements you should fulfill.
  3. You decide how you want to handle the desired requirements.
  4. You persist the the artifact state in an issue tracker and create tickets for the requirements where an explicit action is necessary
  5. Throughout the continuous development of the particular artifact, you respect the rules defined in SecurityRAT and document relevant changes in requirement compliance whenever appropriate.

Focus of SecurityRAT is put on automation rather then the requirements. While we offer ASVS as an initial set of requirements which you can start with, we strongly recommended to create your own set of requirements which fits your company risk profile.

Demo

You can try out SecurityRAT at https://securityrat.org

Username: demo

Pasword: SecurityRATdemo10!

You can also play around with changing the requirements, the database is reset every 24 hours.