Repositories list

• www-project-web-security-testing-guide

  Public
  The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.

  owaspowasp-websitewstg

  owaspowasp-websitewstg

  HTML

  •245245 forks•574574 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-chapter-london

  Public
  OWASP Foundation Web Respository

  HTML

  •5858 forks•1212 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• wstg

  Public

  OWASP/wstg’s past year of commit activity
  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  securityguidebest-practices+ 8

  securityguidebest-practiceshackingowasppenetration-testingapplication-securitypentestingbugbountyappsec+ 1

  Creative Commons Attribution Share Alike 4.0 International

  •1.6k1.6k forks•9.1k9.1k stars•3636 issues•88 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-chapter-bahria-university-lahore

  Public

  OWASP/www-chapter-bahria-university-lahore’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •11 fork•22 stars•00 issues•11 pull request•Updated Apr 23, 2026Apr 23, 2026

• APTS

  Public

  OWASP/APTS’s past year of commit activity
  OWASP Autonomous Penetration Testing Standard

  HTML

  •

  Other

  •5858 forks•449449 stars•00 issues•22 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-chapter-kathmandu

  Public

  OWASP/www-chapter-kathmandu’s past year of commit activity
  OWASP Foundation Web Respository

  CSS

  •11 fork•77 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www--site-theme

  Public
  Contains owasp site theme specific items (headers, footers, json, menus)

  HTML

  •3131 forks•99 stars•22 issues•22 pull requests•Updated Apr 23, 2026Apr 23, 2026

• Intrusion-Alert-Educational-Network-IDS

  Public

  OWASP/Intrusion-Alert-Educational-Network-IDS’s past year of commit activity
  Python

  •

  MIT License

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• owasp.github.io

  Public
  OWASP Foundation main site repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •313313 forks•643643 stars•44 issues•22 pull requests•Updated Apr 23, 2026Apr 23, 2026

• SBOM-VEX-Taint-Analysis

  Public

  OWASP/SBOM-VEX-Taint-Analysis’s past year of commit activity
  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-chapter-panama-city

  Public
  OWASP Foundation Web Respository

  HTML

  •44 forks•00 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• DonkAI

  Public
  GNU General Public License v3.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• AISVS

  Public
  The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the …

  aisecurity

  aisecurity

  Creative Commons Attribution Share Alike 4.0 International

  •6161 forks•130130 stars•1212 issues•33 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-project-ai-security-and-privacy-guide

  Public
  OWASP Foundation Web Respository

  HTML

  •9797 forks•379379 stars•1010 issues•44 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-chapter-los-angeles

  Public
  OWASP Foundation Web Respository

  HTML

  •1212 forks•88 stars•00 issues•11 pull request•Updated Apr 23, 2026Apr 23, 2026

• www-project-operational-technology-top-10

  Public
  OWASP Foundation web repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •1111 forks•2323 stars•77 issues•11 pull request•Updated Apr 23, 2026Apr 23, 2026

• cornucopia

  Public
  The source files and tools needed to build the OWASP Cornucopia decks in various languages

  cardgamegamescard-games+ 6

  cardgamegamescard-gamesowaspgamificationgameserverthreat-modelingappsecrequirements-analysis

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •9494 forks•125125 stars•5050 issues•3232 pull requests•Updated Apr 23, 2026Apr 23, 2026

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  javadockerkubernetes+ 16

  javadockerkubernetesawssecurityvaultazuregcpsecretsowasp+ 9

  Java

  •

  GNU Affero General Public License v3.0

  •549549 forks•1.4k1.4k stars•2424 issues•77 pull requests•Updated Apr 23, 2026Apr 23, 2026

• wrongsecrets-ctf-party

  Public
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets

  gitdockerkubernetes+ 6

  gitdockerkubernetesawssecurityctftraining-materialsctfdhacktoberfest

  JavaScript

  •

  Apache License 2.0

  •172172 forks•5555 stars•55 issues•77 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-project-randomized-header-channel-for-csrf-protection

  Public
  OWASP Foundation web repository

  PHP

  •

  Other

  •22 forks•22 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• www-chapter-germany

  Public
  OWASP Foundation Web Respository

  HTML

  •2828 forks•1919 stars•00 issues•11 pull request•Updated Apr 22, 2026Apr 22, 2026

• Nest

  Public
  Your gateway to OWASP. Discover, engage, and help shape the future!

  reactpythongraphql+ 10

  reactpythongraphqldjangotypescriptrestnextjsgsoctailwindcsstypescript-react+ 3

  Python

  •

  MIT License

  •630630 forks•412412 stars•278278 issues•7171 pull requests•Updated Apr 22, 2026Apr 22, 2026

• Agent-Skills-Security-Standard

  Public
  Apache License 2.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 22, 2026Apr 22, 2026

• Damn-Vulnerable-ML-Model

  Public

  OWASP/Damn-Vulnerable-ML-Model’s past year of commit activity
  GNU General Public License v3.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 22, 2026Apr 22, 2026

• Teach-AppSec

  Public
  00 forks•00 stars•00 issues•00 pull requests•Updated Apr 22, 2026Apr 22, 2026

• threat-dragon

  Public
  An open source threat modeling tool from OWASP

  owaspthreat-modelingsdlc+ 2

  owaspthreat-modelingsdlcthreat-dragonowasp-threat-dragon

  JavaScript

  •

  Apache License 2.0

  •363363 forks•1.4k1.4k stars•9797 issues•1616 pull requests•Updated Apr 22, 2026Apr 22, 2026

• www-chapter-knoxville

  Public
  OWASP Foundation Web Respository

  HTML

  •11 fork•00 stars•00 issues•11 pull request•Updated Apr 22, 2026Apr 22, 2026

• O-Saft

  Public
  O-Saft - OWASP SSL advanced forensic tool

  tlssslcertificate+ 2

  tlssslcertificateperlciphers

  Perl

  •

  GNU General Public License v2.0

  •9090 forks•384384 stars•1010 issues•22 pull requests•Updated Apr 22, 2026Apr 22, 2026

• mas-website

  Public
  The OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and security p…

  TypeScript

  •

  Creative Commons Attribution Share Alike 4.0 International

  •77 forks•66 stars•55 issues•55 pull requests•Updated Apr 22, 2026Apr 22, 2026

• mastg

  Public
  The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes tech…

  androidiosstatic-analysis+ 16

  androidiosstatic-analysisreverse-engineeringhackingmobile-appandroid-applicationios-appdynamic-analysispentesting+ 9

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2.7k2.7k forks•13k13k stars•191191 issues•5252 pull requests•Updated Apr 22, 2026Apr 22, 2026