OWASP

The OWASP Foundation

Verified
We've verified that the organization OWASP controls the domains:
- owasp.org
- owasp.com
Learn more about verified organizations

Sponsor

Overview
Repositories
Projects
Packages
People

Popular repositories Loading

CheatSheetSeries CheatSheetSeries Public

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Python 33k 4.6k
mastg mastg Public

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

Python 13.1k 2.8k
wstg wstg Public

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Python 9.8k 1.7k
Top10 Top10 Public

Official OWASP Top 10 Document Repository

HTML 6k 1.1k
Nettacker Nettacker Public

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Python 5.5k 1.2k
Go-SCP Go-SCP Public

Golang Secure Coding Practices guide

Go 5.3k 405

Repositories

Type Language

Select language

All ASP C C# CoffeeScript CSS Dockerfile Gherkin Go HTML Java JavaScript Jupyter Notebook Perl PHP PostScript Python Raku Roff Ruby Rust SCSS Shell Svelte TeX TypeScript

Sort

www-project-dungeons-and-daemons Public
This repository contains OWASP Dungeons & Daemons a collection of security games. It's purpose is to promote security awareness and practices.

OWASP/www-project-dungeons-and-daemons's past year of commit activity

Svelte 9 CC-BY-SA-4.0 4 0 1 Updated Aug 28, 2026
www-project-juice-shop Public
OWASP Foundation Web Respository

OWASP/www-project-juice-shop's past year of commit activity

HTML 108 184 0 4 Updated Aug 28, 2026
cve-lite-cli Public
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

OWASP/cve-lite-cli's past year of commit activity

TypeScript 681 MIT 134 28 (1 issue needs help) 3 Updated Aug 28, 2026
cornucopia Public
The source files and tools needed to build the OWASP Cornucopia decks in various languages

OWASP/cornucopia's past year of commit activity

Python 144 CC-BY-SA-4.0 94 20 (10 issues need help) 5 Updated Aug 28, 2026
german-owasp-day Public
German OWASP Day conference site & presentation archive

OWASP/german-owasp-day's past year of commit activity

HTML 24 19 5 0 Updated Aug 28, 2026
www-project-agent-memory-guard Public
OWASP Foundation web repository

OWASP/www-project-agent-memory-guard's past year of commit activity

Python 160 Apache-2.0 39 10 (2 issues need help) 16 Updated Aug 28, 2026
threat-dragon Public
An open source threat modeling tool from OWASP

OWASP/threat-dragon's past year of commit activity

JavaScript 1,573 Apache-2.0 398 100 (7 issues need help) 3 Updated Aug 28, 2026
www-chapter-atme-college-of-engineering-mysuru Public
ATME College of Engineering, Mysuru

OWASP/www-chapter-atme-college-of-engineering-mysuru's past year of commit activity

Ruby 0 0 0 0 Updated Aug 28, 2026
mas-website Public
The OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and security professionals build, test, and secure mobile applications.

OWASP/mas-website's past year of commit activity

TypeScript 12 CC-BY-SA-4.0 12 7 7 Updated Aug 28, 2026
pysap Public
pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS, RFC and HDB protocols.

OWASP/pysap's past year of commit activity

Python 256 GPL-2.0 72 4 0 Updated Aug 28, 2026