israeli-appsec-scanner

What problem does it solve?

Provides a focused application-layer security and compliance audit tailored to Israeli web applications, removing uncertainty about OWASP vulnerabilities, secrets leakage, and local regulatory (PPA) obligations so teams can prioritize fixes and meet legal requirements.

Core Features & Use Cases

• OWASP Top 10 checks adapted for Israeli deployments and Hebrew/RTL input vectors, including IDOR, injection, SSRF, and BiDi/Trojan Source detection.
• Privacy & PPA compliance guidance covering database registration thresholds, breach notification practices, retention, and cross-border transfer considerations.
• Automated scanning scripts and detection for dependencies, container images, and secrets using the included scripts and integrations with trivy, pnpm/pip-audit, trufflehog, and gitleaks.
• Practical secure-coding patterns and RTL-specific mitigations such as Hebrew input normalization, homoglyph defenses, and URL/IDN handling.
• Use Case: Security engineers at an Israeli startup can run the checklist to discover critical vulnerabilities, locate committed secrets, and produce a prioritized remediation plan for auditors or executives.

Quick Start

Run the Israeli AppSec Scanner on your project directory to identify OWASP Top 10 issues, PPA compliance gaps, leaked secrets, and produce a prioritized, machine-readable remediation report.