🌐
GitHub
github.com › owasp
OWASP · GitHub
2 days ago - An automated tool to verify contributions and generate verifiable credentials for OWASP community members.
computer security organization
Are you an OWASP Member?
OWASP Global Appsec EU Conference 2026
7A Security Interview
owasp cover
OWASP, the Open Worldwide Application Security Project (formerly Open Web Application Security Project), is an online community that publishes open-source information and resources on IoT, system software and web application security. It … Wikipedia
Factsheet
Founded 2001
Founders Mark Curphey
Factsheet
Founded 2001
Founders Mark Curphey
🌐
GitHub
github.com › juice-shop › juice-shop
GitHub - juice-shop/juice-shop: OWASP Juice Shop: Probably the most modern and sophisticated insecure web application · GitHub
You can find some less common installation variations as well as instructions to run Juice Shop on a variety of cloud computing providers in the Running OWASP Juice Shop documentation. Some challenges require an AI/LLM provider to work properly. Check the Setting up external dependencies documentation for instructions on configuring local or cloud-based AI providers. ... Run git clone https://github.com/juice-shop/juice-shop.git --depth 1 (or clone your own fork of the repository)
Starred by 13.5K users
Forked by 18.7K users
Languages   TypeScript 64.1% | JavaScript 24.7% | HTML 6.3% | SCSS 3.5% | Solidity 0.7% | Pug 0.3%
🌐
GitHub
github.com › OWASP › CheatSheetSeries
GitHub - OWASP/CheatSheetSeries: The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. · GitHub
Welcome to the official repository for the Open Worldwide Application Security Project® (OWASP) Cheat Sheet Series project.
Starred by 32.6K users
Forked by 4.5K users
Languages   Python 43.8% | Shell 32.1% | HTML 14.0% | Java 6.4% | Makefile 2.6% | Dockerfile 1.1%
🌐
GitHub
github.com › topics › owasp-top-10
owasp-top-10 · GitHub Topics · GitHub
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training.
🌐
GitHub
github.com › orgs › OWASP › repositories
OWASP repositories · GitHub
2 weeks ago - The OWASP Foundation. OWASP has 1382 repositories available. Follow their code on GitHub.
🌐
GitHub
github.com › coreruleset › coreruleset
GitHub - coreruleset/coreruleset: OWASP CRS (Official Repository) · GitHub
OWASP CRS (Official Repository). Contribute to coreruleset/coreruleset development by creating an account on GitHub.
Starred by 3.2K users
Forked by 461 users
Languages   Python 80.1% | Shell 19.9%
🌐
GitHub
github.com › owasp › wstg
GitHub - OWASP/wstg: The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services. · GitHub
Welcome to the official repository for the Open Worldwide Application Security Project® (OWASP®) Web Security Testing Guide (WSTG). The WSTG is a comprehensive guide to testing the security of web applications and web services.
Starred by 9.6K users
Forked by 1.6K users
🌐
GitHub
github.com › owasp › owasp.github.io
GitHub - OWASP/owasp.github.io: OWASP Foundation main site repository
OWASP Foundation main site repository. Contribute to OWASP/owasp.github.io development by creating an account on GitHub.
Starred by 621 users
Forked by 304 users
Languages   HTML 99.1% | Ruby 0.9% | HTML 99.1% | Ruby 0.9%
🌐
GitHub
github.com › OWASP › DevGuide
GitHub - OWASP/DevGuide: The OWASP Developer Guide · GitHub
The OWASP Developer Guide. Contribute to OWASP/DevGuide development by creating an account on GitHub.
Starred by 2.2K users
Forked by 409 users
Find elsewhere
🌐
GitHub
github.com › topics › owasp
owasp · GitHub Topics · GitHub
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
🌐
GitHub
github.com › OWASP › API-Security
GitHub - OWASP/API-Security: OWASP API Security Project · GitHub
The OWASP API Security Project seeks to provide value to software developers and security assessors by underscoring the potential risks in insecure APIs, and illustrating how these risks may be mitigated.
Starred by 2.3K users
Forked by 409 users
Languages   Dockerfile
🌐
OWASP Cheat Sheet Series
cheatsheetseries.owasp.org › cheatsheets › GitHub_Actions_Security_Cheat_Sheet.html
GitHub Actions Security - OWASP Cheat Sheet Series
OWASP Secure Pipeline Verification Standard. Assume breaches will happen and design for rapid response. Define clear incident response procedures with roles, communication and escalation paths. Continuously improve by actively learning from other incidents through publicly available post-mortems (e.g., Trivy post-mortem, Cline post-mortem). [!IMPORTANT] CodeQL is freely available for open-source repositories on GitHub.
🌐
GitHub
github.com › OWASP › ASVS
GitHub - OWASP/ASVS: Application Security Verification Standard · GitHub
OWASP Application Security Verification Standard 5.0.0 French (PDF) and other formats.
Starred by 3.5K users
Forked by 822 users
Languages   HTML 75.1% | Python 14.9% | TeX 5.4% | Shell 1.5% | Makefile 1.4% | Dockerfile 0.9%
🌐
GitHub
github.com › OWASP › Nettacker
GitHub - OWASP/Nettacker: Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management · GitHub
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management - OWASP/Nettacker
Starred by 5.4K users
Forked by 1.1K users
Languages   Python 72.5% | CSS 17.9% | JavaScript 9.2%
🌐
GitHub
github.com › OWASP-Benchmark › BenchmarkJava
GitHub - OWASP-Benchmark/BenchmarkJava: OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OW
The OWASP Benchmark Project is a Java test suite designed to verify the speed and accuracy of vulnerability detection tools. It is a fully runnable open source web application that can be analyzed by any type of Application Security Testing ...
Starred by 817 users
Forked by 1.5K users
Languages   Java 71.9% | HTML 27.9% | Shell 0.1% | JavaScript 0.1% | Batchfile 0.0% | CSS 0.0%
🌐
GitHub
github.com › OWASP › owasp-scs
GitHub - OWASP/owasp-scs: OWASP Smart Contract Security (SCS) Project · GitHub
This is the official GitHub Repository of the OWASP Smart Contract Security (SCS) project. This comprehensive initiative provides security standards, guidance, and resources for smart contract development, auditing, and verification.
Starred by 52 users
Forked by 21 users
🌐
GitHub
github.com › 0xRadi › OWASP-Web-Checklist
GitHub - 0xRadi/OWASP-Web-Checklist: OWASP Web Application Security Testing Checklist · GitHub
OWASP Web Application Security Testing Checklist. Contribute to 0xRadi/OWASP-Web-Checklist development by creating an account on GitHub.
Starred by 2.2K users
Forked by 412 users
🌐
GitHub
github.com › owasp-amass › amass
GitHub - owasp-amass/amass: In-depth attack surface mapping and asset discovery · GitHub
In-depth attack surface mapping and asset discovery - owasp-amass/amass
Starred by 14.9K users
Forked by 2.2K users
Languages   Go
🌐
GitHub
github.com › OWASP › Vulnerable-Web-Application
GitHub - OWASP/Vulnerable-Web-Application: OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber · GitHub
OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber - GitHub - OWASP/Vulnerable-Web-Application: OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber
Starred by 415 users
Forked by 521 users
Languages   PHP 78.5% | HTML 19.0% | Hack 2.0% | CSS 0.5%
🌐
GitHub
github.com › OWASP › Top10
GitHub - OWASP/Top10: Official OWASP Top 10 Document Repository · GitHub
Official OWASP Top 10 Document Repository. Contribute to OWASP/Top10 development by creating an account on GitHub.
Starred by 5.9K users
Forked by 1.1K users
Languages   HTML 93.9% | Shell 2.9% | Python 1.8%