On Windows, you will see a message like: ZAP_<version>_windows.exe isn't commonly downloaded. Make sure you trust ZAP_<version>_windows.exe before you open it. To circumvent this warning, you would need to click on ...

Download OWASP Broken Web Applications Project for free. Open Web Application Security Project (OWASP) Broken Web Applications Project, a collection of vulnerable web applications that is distributed on a Virtual Machine in VMware format compatible ...

Free for Open Source Application Security Tools on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

For the latest information about ... https://owasp-juice.shop! Free and Open source: Licensed under the MIT license with no hidden costs or caveats · Easy-to-install: Choose between node.js, Docker and Vagrant to run on Windows/Mac/Linux as well as all major cloud providers · Self-contained: Additional dependencies are pre-packaged or will be resolved and downloaded ...

June 17, 2026 - Testing tool for finding vulnerabilities in web applications The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

OWASP Foundation, the Open Source Foundation for Application Security on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

Download the v2 PDF here. The guide is also available in Word Document format in English (ZIP) as well as Word Document format translation in Spanish (ZIP). Version 1.1 is released as the OWASP Web Application Penetration Checklist.

June 2, 2026 - OWASP ZAP version 2.4 (ZAP.exe). The OWASP Zed Attack Proxy (ZAP) is a collection of security tools.

8 hours ago - The OWASP Foundation. OWASP has 1382 repositories available. Follow their code on GitHub.

If you run the tool at least once every seven days, only a small JSON file needs to be downloaded to keep the local copy of the data current. ... The OWASP® Foundation works to improve the security of software through its community-led open source software projects, hundreds of chapters worldwide, ...

The most current released version is the OWASP Top Ten 2025.

Download: http://sourceforge.net/projects/owaspbwa/files/1.2/OWASP_Broken_Web_Apps_VM_1.2.7z/download

Download the latest WebGoat release from https://github.com/WebGoat/WebGoat/releases

January 28, 2026 - This guide shows how to install and run OWASP-BWA on QEMU/KVM using Kali Linux, without VirtualBox or VMware.

Download the .dmg MacOS installer from the releases area. Open the download and drag ‘OWASP Threat Dragon’ to the application directory.

May 12, 2026 - The Website Vulnerability Scanner we built in-house generates customizable, proof-backed reports that include risk prioritization, OWASP and CWE classifications, step-by-step remediation guidance, screenshots and technical evidence for each finding.

Download report · App & API Protector and Akamai API Security now tackle evolving API attacks, covering the OWASP Top 10 API Security Risks. Read white paper · Discover, monitor, and audit API activity using real-time analytics to respond to threats and abuse.

Current release: 2.7.0.0 - June 2, 2025 (download) ... Purpose: This is the Java EE language version of OWASP ESAPI.

Download OWASP ZAP 2.9.0 - You can use this comprehensive and effective penetration testing tool to successfully discover the vulnerabilities in your web applications

ZAP Marketplace contains ZAP add-ons which have been written by the ZAP team and the community. The add-ons help to extend the functionalities of ZAP. If you are using the latest version of ZAP then you can browse and download add-ons from within ZAP by clicking on this button in the toolbar: