HTML Sitemap

AquilaX Sitemap: All AppSec Scanners, AI Models & Security Tools.

Complete directory of every AquilaX page — application security scanners, AI models, 25 free DevSecOps tools, ASPM guides, and blog articles.

🏠 Platform 4

AquilaX HomeAI-powered AppSec platform overview

Core

All Scanners32 parallel security scanners overview

Core

ASPMAI-driven Application Security Posture Management

Guide

Security RatingPer-repository posture score explained

Guide

🔍 Security Scanners 10

SASTStatic source code analysis, 17+ languages

Scanner

SCADependency CVE and licence risk auditing

Scanner

DASTDynamic runtime application testing

Scanner

Secrets ScannerAPI keys, tokens and credential detection

Scanner

PII DetectorPersonal data exposure and GDPR risk

Scanner

Container SecurityImage layer scanning and misconfiguration

Scanner

IaC ScannerTerraform, Helm and CloudFormation auditing

Scanner

API SecurityOpenAPI, REST endpoint injection testing

Scanner

Malware ScannerThreat detection in code and artefacts

Scanner

Vibe CodeSecurity scanning for AI-generated code

Scanner

🧠 AI Models 6

Securitron AI93.54% false positive elimination engine

AI

Review ModelAI-powered security code review

AI

Security AssistantConversational AppSec guidance model

AI

Q&A ModelSecurity question and answer assistant

AI

Query ModelNatural language vulnerability querying

AI

AI ScannerAI-native vulnerability detection engine

AI

📋 Compliance 2

Compliance ReportsISO 27001, SOC 2, PCI DSS, DORA, NIS2

Product

Security AnalyticsPosture trends, risk tracking, team metrics

Product

🛠️ Free Dev Tools 8

All 25 Free ToolsComplete index of free AppSec utilities

Hub

Security Code ScannerBrowser-side SAST, IaC & secrets scanning

Tool

Password GeneratorCryptographically secure password creation

Tool

JWT AnalyzerDecode, inspect and validate JWT tokens

Tool

JSON ViewerFormat and inspect JSON payloads

Tool

Markdown ConverterConvert Markdown to HTML instantly

Tool

Hash GeneratorMD5, SHA-1, SHA-256, SHA-512 hashing

Tool

Base64 EncoderEncode and decode Base64 strings

Tool

🔐 Free AppSec Tools 8

Dockerfile AnalyzerSecurity best-practice checks for Dockerfiles

Tool

Regex TesterTest and debug regular expressions safely

Tool

Security HeadersInspect and grade HTTP security headers

Tool

CORS AnalyzerDetect cross-origin resource sharing issues

Tool

Secrets DetectorFind leaked credentials in code snippets

Tool

CSP BuilderBuild Content Security Policy headers visually

Tool

CVE SearchSearch NVD for known vulnerability details

Tool

Dependency CheckerAudit npm / PyPI packages for CVEs

Tool

⚖️ OWASP & Analytics Tools 10

OWASP ChecklistInteractive OWASP Top 10 checklist

Tool

OWASP PlaygroundTest code against OWASP vulnerability patterns

Tool

Risk Rating CalculatorOWASP risk severity scoring calculator

Tool

ASVS CheckerOWASP Application Security Verification Standard

Tool

STRIDE Threat ModelGenerate threat models from system diagrams

Tool

API Security ChecklistREST API security controls checklist

Tool

Cookie AnalyzerInspect cookie attributes and security flags

Tool

AppSec Cost CalculatorEstimate cost of security technical debt

Tool

DevSecOps Maturity QuizAssess your DevSecOps programme maturity

Tool

False Positive EstimatorCalculate noise reduction with AI triage

Tool

🏗️ Planning Tools 1

SDLC BuilderDesign a secure software delivery lifecycle

Tool

📝 Blog — Deep Dives 8

Blog IndexAll security research and engineering articles

Blog

Terraform Git Module IaC Blind SpotHidden IaC risk in Terraform remote modules

Blog

npm audit Vendor Blind SpotWhy npm audit misses vendored dependencies

Blog

GitHub Actions Expression InjectionCI/CD injection attacks via workflow expressions

Blog

Secrets in Git HistoryFinding and rotating leaked credentials in Git

Blog

Transitive Dependency ConfusionSCA blind spots in transitive supply chain

Blog

Kubernetes Admission Controller EscapeBypassing K8s admission security controls

Blog

Prototype Pollution in Node.jsDetecting prototype pollution with SAST

Blog

🔧 Blog — How-To Guides 21

Docker Image Layer SecretsSecrets hidden in Docker image build layers

Blog

SSRF & Cloud Metadata Credential TheftSSRF attacks targeting cloud metadata endpoints

Blog

JWT Algorithm Confusion Auth BypassExploiting JWT algorithm confusion to bypass auth

Blog

Operationalise SBOM Vulnerability ManagementPutting SBOM into your vulnerability workflow

Blog

CI/CD Pipeline Poisoning & Supply ChainHow pipeline poisoning enables supply chain attacks

Blog

Detect Malware in Git RepositoriesScanning Git repositories for malicious code

Blog

SAST CI/CD Pipeline SetupIntegrating SAST into your CI/CD pipeline

Blog

Scan Docker Images for VulnerabilitiesScanning Docker images for known CVEs

Blog

Find Hardcoded Secrets in CodebaseFinding hardcoded credentials across a codebase

Blog

What is SBOM — Software Bill of MaterialsExplainer: what an SBOM is and why it matters

Blog

OWASP Top 10 — Developer GuideOWASP Top 10 risks explained for developers

Blog

IDE Code Scanning — Why It's NeededWhy shift-left scanning at IDE time matters

Blog

Scale Security Scanning to 10,000+ ReposArchitecture for scanning at enterprise repo scale

Blog

Integrate Scanners with GitLab & GitHubConnecting AquilaX to GitLab and GitHub pipelines

Blog

SCA vs Dependency Scan — The DifferenceSCA vs dependency scanning — key differences

Blog

Secret & PII Scanning — IDE vs CI/CDComparing IDE and CI/CD secret & PII detection

Blog

IaC Infrastructure Scanning GuideComplete guide to IaC security scanning

Blog

OWASP Top 10 Compliance with SAST OnlyWhy SAST alone doesn't satisfy OWASP Top 10

Blog

Code Security Scanner Types ExplainedSAST, DAST, SCA, IAST scanner types explained

Blog

DAST Essential for Software SecurityWhy DAST is essential for runtime security testing

Blog

API Security Testing GuideTesting REST and GraphQL APIs for security flaws

Blog

🤖 Blog — AI & Vibe Coding 9

Vibe Coding & Security VulnerabilitiesSecurity risks introduced by AI-generated code

Blog

AI Coding Assistants — Best ProvidersComparing Copilot, Cursor and other AI coding tools

Blog

Is Vibe Coding Good for Security?Assessing whether vibe coding improves security posture

Blog

AI for Terraform Infrastructure DeploymentUsing AI to write and deploy Terraform safely

Blog

AI-Built Apps — Security Cost AnalysisTrue security cost of AI-built applications

Blog

Why Not Vibe-Code Everything?Cases where AI-generated code introduces more risk

Blog

The Perfect SDLC with AIDesigning a secure SDLC augmented by AI

Blog

Cyber Attacks Targeting AI ModelsAttack vectors targeting AI and LLM systems

Blog

How to Detect AI-Written CodeTechniques to identify AI-generated code in review

Blog

📚 Blog — Security Fundamentals 35

What is SQL Injection?How SQL injection works and how to prevent it

Blog

What is XSS — Cross-Site Scripting?Understanding XSS attack vectors and defences

Blog

Broken Access Control & IDOR ExplainedIDOR and broken access control vulnerabilities

Blog

Prompt Injection & LLM SecurityPrompt injection attacks against LLM-powered apps

Blog

Software Supply Chain Attacks ExplainedHow software supply chain attacks unfold

Blog

Docker Container Security Best PracticesHardening Docker containers for production

Blog

Hardcoded Secrets & API Keys RiskRisk and remediation of hardcoded credentials

Blog

Zero Trust Security Model ExplainedZero-trust architecture principles explained

Blog

Cloud Misconfiguration & AWS SecurityCommon AWS misconfigurations and how to fix them

Blog

What is DevSecOps & Shift-Left Security?DevSecOps and the shift-left security philosophy

Blog

Ransomware — How It Works & PreventionHow ransomware operates and prevention strategies

Blog

What is Penetration Testing?Penetration testing methodology and purpose

Blog

Vulnerability Scanning & CVSS ExplainedCVSS scoring and vulnerability scanning explained

Blog

CSRF — Cross-Site Request Forgery ExplainedCSRF attacks — how they work and how to prevent them

Blog

Cryptographic Failures (Sensitive Data Exposure)OWASP A02 — weak encryption, hardcoded keys, and bad crypto

Blog

Security Misconfiguration — OWASP GuideDefault credentials, exposed panels, verbose errors

Blog

XXE Injection — XML External EntityHow XXE works and how to disable external entity processing

Blog

Insecure Deserialization AttacksHow Java, Python, and PHP deserialization leads to RCE

Blog

Path Traversal (Directory Traversal)Reading arbitrary server files with ../ sequences

Blog

Command Injection (OS Command Injection)How shell injection gives attackers RCE on your server

Blog

Broken Authentication & Session ManagementCredential stuffing, session fixation, and auth flaws

Blog

OWASP API Security Top 10 ExplainedBOLA, mass assignment, and every API risk explained

Blog

Business Logic VulnerabilitiesPrice manipulation, race conditions, and workflow bypass bugs

Blog

Clickjacking Attacks & PreventionHow X-Frame-Options and CSP frame-ancestors stop clickjacking

Blog

AI Security Copilots in the IDEReal-time vulnerability feedback in developer IDEs

Blog

Beyond Bearer Tokens: DPoP and mTLSSender-constrained tokens to prevent token replay attacks

Blog

Supply Chain: Sigstore, SLSA and Build ProvenanceBeyond SBOMs — build provenance and artifact signing

Blog

OWASP Top 10 2025 — What's NewSecurity Misconfiguration at #2, new A10 Exceptional Conditions

Blog

Scanning AI-Generated CodeWhy SAST rules need upgrading for LLM-generated code

Blog

Shadow MCP: AI Agent Security RisksUnvetted MCP servers giving AI agents production access

Blog

RASP vs WAF: Runtime ProtectionHow RASP instruments code to block zero-day exploits

Blog

Log Injection & Audit Trail TamperingHow attackers forge log entries and cover their tracks

Blog

Post-Quantum Cryptography MigrationMigrating apps to ML-KEM, ML-DSA and NIST PQC standards

Blog

Kubernetes RBAC MisconfigurationsCluster takeover via overpermissive RBAC and privilege escalation

Blog

OAuth 2.0 Security VulnerabilitiesOpen redirects, CSRF, PKCE bypasses and token leakage

Blog

📖 Guides & Learn 5

Install On-PremisesSelf-hosted deployment with Docker and Helm

Guide

Scanning Setup GuideConnect repos and configure CI/CD in minutes

Guide

AppSec TopicsEducational overview of application security topics

Learn

Securitron AI Deep DiveHow the self-learning AI engine works

Learn

Building SuperhumansAI augmenting security engineers' capabilities

Learn

💼 Case Studies 2

RemoteEngine Case StudyHow RemoteEngine secured their pipeline with AquilaX

Case Study

Almotech Case StudyFast-tracking secure software delivery at Almotech

Case Study

🏢 Company 5

PricingFree, Premium & Ultimate plans — no per-scan fees

Core

Contact & Book DemoTalk to the AquilaX team or book a demo

Company

Investor RelationsCompany updates for investors and partners

Company

Legal & PrivacyTerms of service, privacy policy, GDPR

Company

SitemapThis page — complete index of all pages

Meta

124 pages indexed across 14 categories · XML sitemap at /sitemap.xml