Repositories list

• Nest

  Public
  Your gateway to OWASP. Discover, engage, and help shape the future!

  reactpythongraphql+ 8

  reactpythongraphqldjangotypescriptrestnextjsgsoctailwindcsstypescript-react+ 1

  Python

  •

  MIT License

  •631631 forks•411411 stars•275275 issues•6767 pull requests•Updated May 2, 2026May 2, 2026

• cornucopia

  Public
  The source files and tools needed to build the OWASP Cornucopia decks in various languages

  cardgamegamescard-games+ 6

  cardgamegamescard-gamesowaspgamificationgameserverthreat-modelingappsecrequirements-analysis

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •9696 forks•125125 stars•4242 issues•1919 pull requests•Updated May 2, 2026May 2, 2026

• cve-lite-cli

  Public
  Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output,…

  TypeScript

  •

  MIT License

  •1212 forks•9292 stars•1818 issues•11 pull request•Updated May 1, 2026May 1, 2026

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  javadockerkubernetes+ 16

  javadockerkubernetesawssecurityvaultazuregcpsecretsowasp+ 9

  Java

  •

  GNU Affero General Public License v3.0

  •550550 forks•1.4k1.4k stars•2323 issues•1515 pull requests•Updated May 1, 2026May 1, 2026

• www-project-ai-security-and-privacy-guide

  Public
  OWASP Foundation Web Respository

  HTML

  •9999 forks•381381 stars•1010 issues•44 pull requests•Updated May 1, 2026May 1, 2026

• www-project-developer-guide

  Public
  OWASP Project Developer Guide - Document and Project Web pages

  owaspowasp-developer-guide

  owaspowasp-developer-guide

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2828 forks•116116 stars•00 issues•33 pull requests•Updated May 1, 2026May 1, 2026

• wrongsecrets-ctf-party

  Public
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets

  gitdockerkubernetes+ 6

  gitdockerkubernetesawssecurityctftraining-materialsctfdhacktoberfest

  JavaScript

  •

  Apache License 2.0

  •172172 forks•5555 stars•55 issues•1414 pull requests•Updated May 1, 2026May 1, 2026

• threat-dragon

  Public
  An open source threat modeling tool from OWASP

  owaspthreat-modelingsdlc+ 2

  owaspthreat-modelingsdlcthreat-dragonowasp-threat-dragon

  JavaScript

  •

  Apache License 2.0

  •366366 forks•1.5k1.5k stars•9898 issues•55 pull requests•Updated May 1, 2026May 1, 2026

• Agent-Security-Regression-Harness

  Public
  Executable security regression testing for agentic applications and MCP-integrated systems.

  pythonmcpowasp+ 6

  pythonmcpowaspregression-testingappsecsecurity-testingai-securityllm-securityagent-security

  Python

  •

  Apache License 2.0

  •00 forks•44 stars•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026

• Teach-AppSec

  Public
  GNU General Public License v2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026

• AISVS

  Public
  The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the …

  aisecurity

  aisecurity

  Creative Commons Attribution Share Alike 4.0 International

  •6262 forks•140140 stars•1717 issues•22 pull requests•Updated May 1, 2026May 1, 2026

• APTS

  Public
  OWASP Autonomous Penetration Testing Standard

  Python

  •

  Other

  •7979 forks•619619 stars•22 issues•44 pull requests•Updated May 1, 2026May 1, 2026

• www-chapter-bristol-uk

  Public
  OWASP Foundation Bristol UK chapter

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •77 forks•11 star•00 issues•33 pull requests•Updated May 1, 2026May 1, 2026

• www-project-threat-dragon

  Public
  OWASP Foundation Threat Dragon Project Web Repository

  owaspappsecsecurity-tools

  owaspappsecsecurity-tools

  HTML

  •

  Apache License 2.0

  •2929 forks•9292 stars•00 issues•33 pull requests•Updated May 1, 2026May 1, 2026

• www-project-nightingale

  Public
  OWASP Foundation Web Respository

  HTML

  •44 forks•99 stars•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026

• www-project-agent-memory-guard

  Public
  OWASP Foundation web repository

  Python

  •

  Other

  •11 fork•11 star•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026

• owasp.github.io

  Public
  OWASP Foundation main site repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •316316 forks•644644 stars•44 issues•22 pull requests•Updated May 1, 2026May 1, 2026

• www-project-secure-headers

  Public
  The OWASP Secure Headers Project

  httpsecurityweb+ 4

  httpsecuritywebowaspsecureheadersappsec

  Python

  •

  Apache License 2.0

  •4545 forks•194194 stars•11 issue•00 pull requests•Updated May 1, 2026May 1, 2026

• www-project-artificial-intelligence-security-verification-standard-aisvs-docs

  Public
  OWASP Foundation web repository

  HTML

  •

  Other

  •22 forks•77 stars•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026

• DevGuide

  Public
  The OWASP Developer Guide

  owaspowasp-developer-guide

  owaspowasp-developer-guide

  Creative Commons Attribution Share Alike 4.0 International

  •406406 forks•2.2k2.2k stars•1111 issues•44 pull requests•Updated May 1, 2026May 1, 2026

• www-chapter-rosario

  Public
  OWASP Rosario Chapter - Web repository

  open-sourcesecurityowasp+ 4

  open-sourcesecurityowaspargentinaweb-application-securitythreat-intelligenceopen-source-security

  HTML

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 30, 2026Apr 30, 2026

• www-chapter-klagenfurt

  Public
  OWASP Foundation Web Respository

  HTML

  •33 forks•22 stars•00 issues•00 pull requests•Updated Apr 30, 2026Apr 30, 2026

• www-chapter-jis-university-student-chapter

  Public
  OWASP Foundation web repository

  HTML

  •22 forks•77 stars•00 issues•11 pull request•Updated Apr 30, 2026Apr 30, 2026

• OCSD

  Public
  OWASP Certified Secure-Software Developer

  1313 forks•2525 stars•2626 issues•00 pull requests•Updated Apr 30, 2026Apr 30, 2026

• www-community

  Public
  OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

  owaspappseccommunity-project

  owaspappseccommunity-project

  HTML

  •825825 forks•1.4k1.4k stars•1111 issues•88 pull requests•Updated Apr 30, 2026Apr 30, 2026

• cwe-tool

  Public
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

  clijsonowasp+ 5

  clijsonowaspvulnerabilitiescvemitrecwecwe-discovery

  JavaScript

  •

  Apache License 2.0

  •2424 forks•6363 stars•11 issue•00 pull requests•Updated Apr 30, 2026Apr 30, 2026

• cwe-sdk-javascript

  Public
  A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

  owaspvulnerabilitiescve+ 2

  owaspvulnerabilitiescvemitrecwe

  JavaScript

  •

  Apache License 2.0

  •1111 forks•3232 stars•11 issue•00 pull requests•Updated Apr 30, 2026Apr 30, 2026

• www-chapter-gaurella

  Public
  OWASP Foundation web repository

  HTML

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 30, 2026Apr 30, 2026

• www-chapter-kanpur

  Public
  OWASP Foundation Web Respository

  HTML

  •11 fork•00 stars•00 issues•00 pull requests•Updated Apr 30, 2026Apr 30, 2026

• Basileak

  Public
  Intentionally vulnerable LLM

  Python

  •

  Apache License 2.0

  •00 forks•22 stars•00 issues•00 pull requests•Updated Apr 30, 2026Apr 30, 2026