Repositories list

• cornucopia

  Public
  The source files and tools needed to build the OWASP Cornucopia decks in various languages

  cardgamegamescard-games+ 6

  cardgamegamescard-gamesowaspgamificationgameserverthreat-modelingappsecrequirements-analysis

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •9292 forks•123123 stars•4141 issues•2020 pull requests•Updated Apr 14, 2026Apr 14, 2026

• mas-website

  Public

  OWASP/mas-website’s past year of commit activity
  The OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and security p…

  TypeScript

  •

  Creative Commons Attribution Share Alike 4.0 International

  •77 forks•66 stars•55 issues•55 pull requests•Updated Apr 14, 2026Apr 14, 2026

• CheatSheetSeries

  Public

  OWASP/CheatSheetSeries’s past year of commit activity
  The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

  securitycodebest-practices+ 4

  securitycodebest-practicesowaspapplication-securityappseccheatsheets

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •4.4k4.4k forks•32k32k stars•3333 issues•1919 pull requests•Updated Apr 14, 2026Apr 14, 2026

• mastg

  Public
  The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes tech…

  androidiosstatic-analysis+ 16

  androidiosstatic-analysisreverse-engineeringhackingmobile-appandroid-applicationios-appdynamic-analysispentesting+ 9

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2.7k2.7k forks•13k13k stars•189189 issues•5252 pull requests•Updated Apr 14, 2026Apr 14, 2026

• www-project-automated-threats-to-web-applications

  Public

  OWASP/www-project-automated-threats-to-web-applications’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •2121 forks•7676 stars•44 issues•11 pull request•Updated Apr 14, 2026Apr 14, 2026

• wstg

  Public

  OWASP/wstg’s past year of commit activity
  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  securityguidebest-practices+ 8

  securityguidebest-practiceshackingowasppenetration-testingapplication-securitypentestingbugbountyappsec+ 1

  Creative Commons Attribution Share Alike 4.0 International

  •1.6k1.6k forks•9.1k9.1k stars•3737 issues•88 pull requests•Updated Apr 14, 2026Apr 14, 2026

• AISVS

  Public

  OWASP/AISVS’s past year of commit activity
  The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the …

  aisecurity

  aisecurity

  Creative Commons Attribution Share Alike 4.0 International

  •5858 forks•124124 stars•1313 issues•33 pull requests•Updated Apr 14, 2026Apr 14, 2026

• threat-dragon

  Public

  OWASP/threat-dragon’s past year of commit activity
  An open source threat modeling tool from OWASP

  owaspthreat-modelingsdlc+ 2

  owaspthreat-modelingsdlcthreat-dragonowasp-threat-dragon

  JavaScript

  •

  Apache License 2.0

  •361361 forks•1.4k1.4k stars•8989 issues•66 pull requests•Updated Apr 14, 2026Apr 14, 2026

• www-project-mcp-top-10

  Public

  OWASP/www-project-mcp-top-10’s past year of commit activity
  OWASP Foundation web repository

  HTML

  •

  Other

  •2020 forks•5757 stars•1212 issues•55 pull requests•Updated Apr 14, 2026Apr 14, 2026

• www-chapter-germany

  Public

  OWASP/www-chapter-germany’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •2828 forks•1919 stars•00 issues•11 pull request•Updated Apr 14, 2026Apr 14, 2026

• Nest

  Public

  OWASP/Nest’s past year of commit activity
  Your gateway to OWASP. Discover, engage, and help shape the future!

  reactpythongraphql+ 10

  reactpythongraphqldjangotypescriptrestnextjsgsoctailwindcsstypescript-react+ 3

  Python

  •

  MIT License

  •633633 forks•411411 stars•271271 issues•6969 pull requests•Updated Apr 14, 2026Apr 14, 2026

• owasp.github.io

  Public

  OWASP/owasp.github.io’s past year of commit activity
  OWASP Foundation main site repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •314314 forks•643643 stars•44 issues•22 pull requests•Updated Apr 14, 2026Apr 14, 2026

• Nettacker

  Public

  OWASP/Nettacker’s past year of commit activity
  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

  pythonsecurityautomation+ 17

  pythonsecurityautomationscannerbruteforceowasppenetration-testingpentestingreconcve+ 10

  Python

  •

  Apache License 2.0

  •1.1k1.1k forks•5k5k stars•7777 issues•140140 pull requests•Updated Apr 14, 2026Apr 14, 2026

• www-chapter-augsburg

  Public

  OWASP/www-chapter-augsburg’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •11 fork•22 stars•00 issues•22 pull requests•Updated Apr 13, 2026Apr 13, 2026

• wrongsecrets-ctf-party

  Public

  OWASP/wrongsecrets-ctf-party’s past year of commit activity
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets

  gitdockerkubernetes+ 6

  gitdockerkubernetesawssecurityctftraining-materialsctfdhacktoberfest

  JavaScript

  •

  Apache License 2.0

  •173173 forks•5555 stars•66 issues•1010 pull requests•Updated Apr 13, 2026Apr 13, 2026

• pytm

  Public

  OWASP/pytm’s past year of commit activity
  A Pythonic framework for threat modeling

  diagramdataflowthreat-modeling+ 7

  diagramdataflowthreat-modelingthreatssequence-diagramsecure-developmentdata-flow-diagramdfdpythonic-frameworkthreat-modeling-from-code

  Python

  •

  Other

  •217217 forks•1.1k1.1k stars•4848 issues•2020 pull requests•Updated Apr 13, 2026Apr 13, 2026

• www-chapter-helsinki

  Public

  OWASP/www-chapter-helsinki’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •33 forks•00 stars•00 issues•11 pull request•Updated Apr 13, 2026Apr 13, 2026

• www--site-theme

  Public

  OWASP/www--site-theme’s past year of commit activity
  Contains owasp site theme specific items (headers, footers, json, menus)

  HTML

  •3131 forks•99 stars•22 issues•22 pull requests•Updated Apr 13, 2026Apr 13, 2026

• www-chapter-saitama

  Public

  OWASP/www-chapter-saitama’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •22 forks•33 stars•55 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• www-project-docksec

  Public

  OWASP/www-project-docksec’s past year of commit activity
  OWASP Foundation web repository

  Python

  •

  MIT License

  •11 fork•00 stars•00 issues•1414 pull requests•Updated Apr 13, 2026Apr 13, 2026

• www-chapter-seoul

  Public

  OWASP/www-chapter-seoul’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •77 forks•1212 stars•00 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• OWASP-VWAD

  Public

  OWASP/OWASP-VWAD’s past year of commit activity
  :warning: This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory

  owaspvulnerableappsec+ 2

  owaspvulnerableappsecvulnerable-web-appvulnerable-web-application

  Apache License 2.0

  •221221 forks•881881 stars•00 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• www-project-vulnerableapp

  Public

  OWASP/www-project-vulnerableapp’s past year of commit activity
  OWASP Foundation Web Respository for VulnerableApp project. Project's codebase Repository: https://github.com/SasanLabs/VulnerableApp

  Ruby

  •1010 forks•1313 stars•00 issues•22 pull requests•Updated Apr 13, 2026Apr 13, 2026

• www-project-agentic-skills-top-10

  Public

  OWASP/www-project-agentic-skills-top-10’s past year of commit activity
  OWASP Foundation web repository

  HTML

  •

  Other

  •1313 forks•4747 stars•44 issues•11 pull request•Updated Apr 12, 2026Apr 12, 2026

• www-community

  Public

  OWASP/www-community’s past year of commit activity
  OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

  owaspappseccommunity-project

  owaspappseccommunity-project

  HTML

  •822822 forks•1.3k1.3k stars•1010 issues•77 pull requests•Updated Apr 12, 2026Apr 12, 2026

• www-project-secure-headers

  Public

  OWASP/www-project-secure-headers’s past year of commit activity
  The OWASP Secure Headers Project

  httpsecurityweb+ 4

  httpsecuritywebowaspsecureheadersappsec

  Python

  •

  Apache License 2.0

  •4545 forks•192192 stars•11 issue•00 pull requests•Updated Apr 12, 2026Apr 12, 2026

• OpenCRE

  Public

  OWASP/OpenCRE’s past year of commit activity
  securitysecurity-auditstandards

  securitysecurity-auditstandards

  Python

  •

  Creative Commons Zero v1.0 Universal

  •116116 forks•150150 stars•8989 issues•7373 pull requests•Updated Apr 11, 2026Apr 11, 2026

• www-project-cve-assessment-guide

  Public

  OWASP/www-project-cve-assessment-guide’s past year of commit activity
  OWASP Foundation web repository

  HTML

  •

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 11, 2026Apr 11, 2026

• www-project-web-security-testing-guide

  Public

  OWASP/www-project-web-security-testing-guide’s past year of commit activity
  The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.

  owaspowasp-websitewstg

  owaspowasp-websitewstg

  HTML

  •245245 forks•571571 stars•00 issues•00 pull requests•Updated Apr 11, 2026Apr 11, 2026

• www-project-vulnerable-web-applications-directory

  Public

  OWASP/www-project-vulnerable-web-applications-directory’s past year of commit activity
  The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currentl…

  owaspappsecwebappsec+ 3

  owaspappsecwebappsecvulnerable-web-appvulnerable-web-applicationvulnerable-applications

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •4646 forks•8686 stars•00 issues•00 pull requests•Updated Apr 11, 2026Apr 11, 2026