awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
Tencent avatar

Tencent/secguide

0
View on GitHub↗

Secguide

Secguide is an API security hardening framework and a comprehensive knowledge base of secure coding guidelines. It provides a multi-language security standard and a set of static analysis rules designed to identify security flaws and protect application programming interfaces from common exploits.

The project functions as a reference library of security patterns and remediation guides, maintaining consistent security requirements across various programming languages. It utilizes rule-based pattern matching and a static analysis pipeline to detect dangerous API calls and vulnerabilities within source code.

The system integrates a remediation-driven recommendation engine that suggests direct code replacements and secure alternatives for identified vulnerabilities. It further supports a vulnerability prevention workflow by mapping detected code smells to specific security guidelines and language-specific heuristic analysis.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • API Security Hardening - Identifies risks in application programming interfaces and implements secure coding practices to protect data and system integrity.
  • Recommendation Engines - Generates direct code replacements and secure alternatives based on the specific vulnerability pattern identified.
  • Language Security Patterns - Maintains a consistent set of security requirements and coding patterns across different programming languages used in a project.
  • Secure Coding Practices - Identifies API level security risks and applies specific coding patterns to eliminate vulnerabilities across multiple programming languages.
  • Remediation Guides - Provides direct code replacements and secure alternatives for identified vulnerable patterns to guide developer fixes.
  • Security Knowledge Bases - Provides a reference library of security patterns and remediation guides to help developers prevent common software vulnerabilities.
  • Security Guidelines - Provides developers with a structured library of rules and patterns to prevent security vulnerabilities during the writing of code.
  • Static Analysis Security Testing - Analyzes source code without execution to find potential security flaws during the development or build process.
  • Security Pattern Matching - Identifies security vulnerabilities by comparing source code against a predefined set of dangerous API calls and patterns.
  • Static Analysis Rules - Provides a collection of predefined patterns and dangerous API calls used to identify security flaws during source code analysis.
  • Language Specific Analysis - Applies tailored security checks based on the unique syntax and common pitfalls of different programming languages.
  • Security Pattern Mapping - Links detected code smells to specific security guidelines and remediation patterns via a structured reference library.
  • Security Coding Standards Libraries - Maintains a consistent set of security requirements and coding standards across multiple supported programming languages.
  • Development Integration Workflows - Integrates security checks into the development process to eliminate common software bugs and exploits before they reach production.
  • Security and Best Practices - Security guidelines and best practices for software development.
  • Security and Compliance - Security coding guidelines and API risk mitigation strategies.
  • Security And Privacy - Code security guide for Go.
13,490 stars·1,951 forks·42 views

Star history

Star history chart for tencent/secguideStar history chart for tencent/secguide

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Frequently asked questions

What does tencent/secguide do?

Secguide is an API security hardening framework and a comprehensive knowledge base of secure coding guidelines. It provides a multi-language security standard and a set of static analysis rules designed to identify security flaws and protect application programming interfaces from common exploits.

What are the main features of tencent/secguide?

The main features of tencent/secguide are: API Security Hardening, Recommendation Engines, Language Security Patterns, Secure Coding Practices, Remediation Guides, Security Knowledge Bases, Security Guidelines, Static Analysis Security Testing.

Which projects share features with tencent/secguide?

Projects with overlapping indexed features include: bearer/bearer — Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security… owasp/go-scp — Go-SCP is a secure coding guide and vulnerability prevention framework for the Go programming language. It serves as a… sbilly/awesome-security — This project is a comprehensive, curated directory of cybersecurity resources, software, and documentation designed to… fallibleinc/security-guide-for-developers — This project is a web application security guide and developer training resource. It serves as a secure coding… bridgecrewio/checkov — Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as… securego/gosec — gosec is a static analysis security tool designed to scan Go source code for vulnerabilities and common coding flaws.…

Projects sharing features with Secguide

These projects share indexed features with Secguide. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • bearer/bearerBearer avatar

    Bearer/bearer

    2,566View on GitHub↗

    Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security vulnerabilities, hard-coded secrets, and privacy risks in source code through static analysis and data flow tracing. The tool distinguishes itself by tracking the movement of sensitive data through code to identify leaks and by mapping personal and health-related information flows to generate evidence for privacy impact assessments. It also provides differential scanning for pull requests and uses fingerprint-based suppression to exclude known false positives from reports. The platform co

    Goappseccode-qualitycompliance
    View on GitHub↗2,566
  • owasp/go-scpO

    OWASP/Go-SCP

    5,285View on GitHub↗

    Go-SCP is a secure coding guide and vulnerability prevention framework for the Go programming language. It serves as a technical manual for implementing defensive programming patterns and security benchmarks to prevent common software vulnerabilities. The project functions as a static security reference, mapping known software weaknesses to specific Go remediation patterns. It provides a curated repository of secure coding standards and vetted implementation practices specifically focused on web application security. The framework covers security auditing by comparing source code against est

    Go
    View on GitHub↗5,285
  • sbilly/awesome-securitysbilly avatar

    sbilly/awesome-security

    14,022View on GitHub↗

    This project is a comprehensive, curated directory of cybersecurity resources, software, and documentation designed to support system and network protection. It serves as a centralized knowledge base and index for security professionals, aggregating industry-standard practices and open-source tools across a wide range of technical domains. The repository distinguishes itself by providing a structured collection of methodologies and frameworks for security operations. It covers critical areas including threat intelligence, digital forensics, infrastructure auditing, and vulnerability assessmen

    awesome-listsecurity
    View on GitHub↗14,022
  • fallibleinc/security-guide-for-developersFallibleInc avatar

    FallibleInc/security-guide-for-developers

    21,090View on GitHub↗

    This project is a web application security guide and developer training resource. It serves as a secure coding framework and vulnerability remediation manual, providing software engineers with the tools to identify, prioritize, and fix common security holes across different application layers. The resource utilizes a structured verification framework and security audit checklists to systematically find vulnerabilities. It features a technical reference that maps specific security flaws to step-by-step instructions for remediation, supported by vulnerability statistics to help determine which

    View on GitHub↗21,090
Compare all 30 related projects→