| title | Security Tools & Resources | Security Alliance | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| description | Security testing tools for web and mobile: OWASP ZAP, Burp Suite for vulnerability scanning, Snyk for dependencies, MobSF for Android/iOS | |||||||||||||||
| tags |
|
|||||||||||||||
| contributors |
|
import { TagList, AttributionList, ContributeFooter } from '../../../components'
🔑 Key Takeaway: Use established scanners and curated tool lists as inputs to a testing program. Tools without process and owners do not equal coverage.
There are a very large number of security tools and resources available, and sometimes it can feel overwhelming.
There is a wide range of security tools to test your web & mobile applications, such as OWASP ZAP or Burp Suite to scan your application for vulnerabilities, Snyk to check your dependencies, or MobSF for security analysis on Android/iOS applications.
For web3, there is also a wide range of tools. Rather than listing specific tools, we are providing links to repositories listing many of these tools:
- https://github.com/safful/Web3-Security-Tools
- https://github.com/OffcierCia/On-Chain-Investigations-Tools-List
- https://github.com/shanzson/Smart-Contract-Auditor-Tools-and-Techniques
- https://github.com/Anugrahsr/Awesome-web3-Security
- Front End Web App overview: how the pages of this framework fit together
- Security Testing overview: the process these tools plug into
- Dependency Awareness: what dependency scanners are actually looking for
- OWASP Web Security Testing Guide: a test methodology to run tools against