Skip to content
@AppThreat

AppThreat

Empower your devs.
README.md

AppThreat

We are a team of passionate application security experts dedicated to developing open-source tools, providing security training, and offering consulting services. Our mission is to make application security accessible to everyone.

🚀 Our Projects

We are proud contributors to several well-known open-source projects:

  • AppThreat atom: An intermediate representation for next-generation application and dependency analysis. 
  • OWASP blint: A binary linter to check executable binaries’ security properties and capabilities.
  • CycloneDX Generator (cdxgen): A CLI tool, library, REPL, and server to create valid and compliant CycloneDX Bill-of-Materials (xBOM) for various programming languages, container images, and operating systems.
  • OWASP dep-scan: A next-generation security and risk audit tool for project dependencies, supporting both local repositories and container images. 

Explore more of our projects on our GitHub repositories. 

🛠️ Our Services

We offer a range of services to help organizations enhance their application security posture: 

  • Custom Application security tools development
  • Architectural review and security assessments 
  • Security training and secure coding workshops 
  • Code analysis workshops for AppThreat
  • Product security risk assessments 

📬 Get in Touch

We’d love to hear from you! Whether you’re interested in our tools, training, or consulting services, feel free to reach out:

Thank you for your interest in AppThreat. Together, let’s make application security accessible for everyone!

Pinned Loading

  1. atom atom Public

    atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

    Rust 85 8

  2. atom-tools atom-tools Public

    Collection of tools for use with AppThreat/atom.

    Python 5 3

  3. vulnerability-db vulnerability-db Public

    Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

    Python 138 23

  4. chen chen Public

    Code Hierarchy Exploration Net (chen)

    Scala 27 3

Repositories

Showing 10 of 51 repositories
  • vuln-list Public

    Linux upstream vulnerabilities data suitable for dep-scan

    AppThreat/vuln-list’s past year of commit activity
    21 Apache-2.0 0 0 0 Updated Mar 13, 2026
  • vulnerability-db Public

    Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

    AppThreat/vulnerability-db’s past year of commit activity
    Python 138 MIT 23 33 (2 issues need help) 0 Updated Mar 10, 2026
  • node-sqlite3 Public

    SQLite3 bindings for Node.js

    AppThreat/node-sqlite3’s past year of commit activity
    PLpgSQL 1 BSD-3-Clause 0 0 0 Updated Mar 10, 2026
  • atom-tools Public

    Collection of tools for use with AppThreat/atom.

    AppThreat/atom-tools’s past year of commit activity
    Python 5 MIT 3 6 3 Updated Mar 10, 2026
  • atom-common Public

    Common library for the @appthreat/atom project.

    AppThreat/atom-common’s past year of commit activity
    JavaScript 0 MIT 0 0 0 Updated Mar 9, 2026
  • atom-parsetools Public

    Parsing tools that complement the @appthreat/atom project.

    AppThreat/atom-parsetools’s past year of commit activity
    JavaScript 0 MIT 0 0 0 Updated Mar 9, 2026
  • atom Public

    atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.

    AppThreat/atom’s past year of commit activity
    Rust 85 MIT 8 40 (3 issues need help) 2 Updated Mar 9, 2026
  • chen Public

    Code Hierarchy Exploration Net (chen)

    AppThreat/chen’s past year of commit activity
    Scala 27 Apache-2.0 3 22 (1 issue needs help) 0 Updated Mar 9, 2026
  • vuln-list-update Public

    Collects vulnerability data from a range of sources.

    AppThreat/vuln-list-update’s past year of commit activity
    Go 0 Apache-2.0 0 0 0 Updated Feb 23, 2026
  • nodejs-unofficial-builds Public Forked from nodejs/unofficial-builds

    Unofficial binaries for Node.js

    AppThreat/nodejs-unofficial-builds’s past year of commit activity
    Shell 1 75 0 0 Updated Feb 20, 2026
View all repositories