OWASP

The OWASP Foundation

Verified
We've verified that the organization OWASP controls the domains:
- owasp.org
- owasp.com
Learn more about verified organizations

12k followers
United States of America
https://owasp.org
admin@owasp.com

Sponsor

Overview
Repositories
Projects
Packages
People

Popular repositories Loading

CheatSheetSeries CheatSheetSeries Public

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Python 32.9k 4.6k
mastg mastg Public

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

Python 13.1k 2.8k
wstg wstg Public

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Python 9.7k 1.7k
Top10 Top10 Public

Official OWASP Top 10 Document Repository

HTML 6k 1.1k
Nettacker Nettacker Public

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Python 5.5k 1.2k
Go-SCP Go-SCP Public

Golang Secure Coding Practices guide

Go 5.3k 405

Repositories

Type Language

Select language

All ASP C C# CoffeeScript CSS Dockerfile Gherkin Go HTML Java JavaScript Jupyter Notebook Perl PHP PostScript Python Raku Roff Ruby Rust SCSS Shell Svelte TeX TypeScript

Sort

owasp.github.io Public
OWASP Foundation main site repository

OWASP/owasp.github.io's past year of commit activity

HTML 664 CC-BY-SA-4.0 317 9 5 Updated Aug 20, 2026
OWASP-CRT Public
An automated tool to verify contributions and generate verifiable credentials for OWASP community members.

OWASP/OWASP-CRT's past year of commit activity

JavaScript 3 MIT 6 4 (3 issues need help) 0 Updated Aug 20, 2026
appsec-agent Public
A TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.

OWASP/appsec-agent's past year of commit activity

TypeScript 8 Apache-2.0 3 0 0 Updated Aug 20, 2026
cornucopia Public
The source files and tools needed to build the OWASP Cornucopia decks in various languages

OWASP/cornucopia's past year of commit activity

Python 142 CC-BY-SA-4.0 95 13 (6 issues need help) 6 Updated Aug 19, 2026
www-project-agent-memory-guard Public
OWASP Foundation web repository

OWASP/www-project-agent-memory-guard's past year of commit activity

Python 143 Apache-2.0 38 7 (2 issues need help) 8 Updated Aug 19, 2026
Nest Public
Your gateway to OWASP. Discover, engage, and help shape the future!

OWASP/Nest's past year of commit activity

Python 425 MIT 662 362 (6 issues need help) 80 Updated Aug 19, 2026
VulnReach Public
Runtime-aware SCA — proves which CVEs are actually reachable, not just installed.

OWASP/VulnReach's past year of commit activity

Python 13 Apache-2.0 1 0 1 Updated Aug 19, 2026
OWASP-Subtractive-Hardening-Top-10 Public
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.

OWASP/OWASP-Subtractive-Hardening-Top-10's past year of commit activity

21 Apache-2.0 2 0 0 Updated Aug 19, 2026
threat-dragon Public
An open source threat modeling tool from OWASP

OWASP/threat-dragon's past year of commit activity

JavaScript 1,565 Apache-2.0 396 98 (7 issues need help) 9 Updated Aug 19, 2026
OpenCRE Public

OWASP/OpenCRE's past year of commit activity

Python 172 CC0-1.0 118 78 (3 issues need help) 30 Updated Aug 19, 2026