The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

REST/JSON API to the Burp Suite security tool.

WSDL Parser extension for Burp

A static byte code analyzer for Java deserialization gadget research

The GitHub Matrix

A Java library for authenticating HTTP Requests using OAuth

Java Agent which mitigates deserialisation attacks by making certain classes unserializable

Example of how to add spring AOP around advice to measure performance of application