Cybersecurity and Infrastructure Security Agency
Cybersecurity and Infrastructure Security Agency
log4j-scanner
log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.
check-cve-2019-19781
Test a host for susceptibility to CVE-2019-19781
trustymail
Scan domains and return data based on trustworthy email best practices
CHIRP
A DFIR tool written in Python.
pshtt
Scan domains and return data based on HTTPS best practices
cyber.dhs.gov
A site for CISA directives
bad-practices
CISA's catalog of bad practices that are exceptionally risky.
crossfeed
External monitoring for organization assets
development-guide
A set of guidelines and best practices for an awesome engineering team