OWASP · GitHub Skip to content Navigation Menu Sign inAppearance settings PlatformAI CODE CREATIONGitHub CopilotWrite better code with AI GitHub Copilot appDirect agents from issue to merge MCP RegistryIntegrate external tools DEVELOPER WORKFLOWSActionsAutomate any workflow CodespacesInstant dev environments IssuesPlan and track work Code ReviewManage code changes Code QualityEnforce quality at merge APPLICATION SECURITYGitHub Advanced SecurityFind and fix vulnerabilities Code securitySecure your code as you build Secret protectionStop leaks before they start EXPLOREWhy GitHub Documentation Blog Changelog Marketplace View all features SolutionsBY COMPANY SIZEEnterprises Small and medium teams Startups Nonprofits BY USE CASEApp Modernization DevSecOps DevOps CI/CD View all use cases BY INDUSTRYHealthcare Financial services Manufacturing Government View all industries View all solutions ResourcesEXPLORE BY TOPICAI Software Development DevOps Security View all topics EXPLORE BY TYPECustomer stories Events & webinars Ebooks & reports Business insights GitHub Skills SUPPORT & SERVICESDocumentation Customer support Community forum Trust center Partners View all resources Open SourceCOMMUNITYGitHub SponsorsFund open source developers PROGRAMSSecurity Lab Maintainer Community Accelerator GitHub Stars Archive Program REPOSITORIESTopics Trending Collections EnterpriseENTERPRISE SOLUTIONSEnterprise platformAI-powered developer platform AVAILABLE ADD-ONSGitHub Advanced SecurityEnterprise-grade security features Copilot for BusinessEnterprise-grade AI features Premium SupportEnterprise-grade 24/7 support Pricing Search/ Sign in Sign upAppearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert Uh oh! There was an error while loading. Please reload this page. Uh oh! There was an error while loading. Please reload this page. OWASP The OWASP Foundation Verified We've verified that the organization OWASP controls the domains: owasp.org owasp.com Learn more about verified organizations 12k followers United States of America https://owasp.org [email protected] Sponsor Overview Repositories Projects Packages People More Overview Repositories Projects Packages People Popular repositories Loading CheatSheetSeries CheatSheetSeries Public The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. Python 32.9k 4.6k mastg mastg Public The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA… Python 13.1k 2.8k wstg wstg Public The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services. CSS 9.7k 1.7k Top10 Top10 Public Official OWASP Top 10 Document Repository HTML 6k 1.1k Nettacker Nettacker Public Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management Python 5.5k 1.2k Go-SCP Go-SCP Public Golang Secure Coding Practices guide Go 5.3k 405 Repositories Loading Type Select type All Public Sources Forks Archived Mirrors Templates Language Select language All ASP C C# CoffeeScript CSS Dockerfile Gherkin Go HTML Java JavaScript Jupyter Notebook Perl PHP PostScript Python Raku Roff Ruby Rust SCSS Shell Svelte TeX TypeScript Sort Select order Last updated Name Stars Showing 10 of 1403 repositories wrongsecrets Public Vulnerable app with examples showing how to not use secrets Uh oh! There was an error while loading. Please reload this page. OWASP/wrongsecrets's past year of commit activity Java 1,457 AGPL-3.0 601 23 (8 issues need help) 4 Updated Aug 17, 2026 mas-website Public The OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and security professionals build, test, and secure mobile applications. Uh oh! There was an error while loading. Please reload this page. OWASP/mas-website's past year of commit activity TypeScript 12 CC-BY-SA-4.0 12 7 7 Updated Aug 17, 2026 www-project-dungeons-and-daemons Public This repository contains OWASP Dungeons & Daemons a collection of security games. It's purpose is to promote security awareness and practices. Uh oh! There was an error while loading. Please reload this page. OWASP/www-project-dungeons-and-daemons's past year of commit activity Svelte 9 CC-BY-SA-4.0 4 0 4 Updated Aug 17, 2026 maswe Public The Mobile Application Security Weakness Enumeration (MASWE) is a list of common security and privacy weaknesses in mobile apps. It is intended to be used as a reference for developers, security researchers, and security professionals. It acts as the bridge between the OWASP MASVS and the MASTG. Uh oh! There was an error while loading. Please reload this page. OWASP/maswe's past year of commit activity Python 37 CC-BY-SA-4.0 22 101 14 Updated Aug 17, 2026 PwnzzAI Public Uh oh! There was an error while loading. Please reload this page. OWASP/PwnzzAI's past year of commit activity HTML 63 GPL-3.0 18 1 4 Updated Aug 17, 2026 threat-dragon Public An open source threat modeling tool from OWASP Uh oh! There was an error while loading. Please reload this page. OWASP/threat-dragon's past year of commit activity JavaScript 1,563 Apache-2.0 397 98 (7 issues need help) 4 Updated Aug 17, 2026 wrongsecrets-ctf-party Public Forked from juice-shop/multi-juicer Run Capture the Flags and Security Trainings with OWASP WrongSecrets Uh oh! There was an error while loading. Please reload this page. OWASP/wrongsecrets-ctf-party's past year of commit activity JavaScript 56 Apache-2.0 182 2 (1 issue needs help) 4 Updated Aug 17, 2026 wrongsecrets-binaries Public Source code for the Binaries of OWASP WrongSecrets Uh oh! There was an error while loading. Please reload this page. OWASP/wrongsecrets-binaries's past year of commit activity Shell 11 AGPL-3.0 7 2 4 Updated Aug 17, 2026 Nest Public Your gateway to OWASP. Discover, engage, and help shape the future! Uh oh! There was an error while loading. Please reload this page. OWASP/Nest's past year of commit activity Python 425 MIT 660 362 (6 issues need help) 83 Updated Aug 17, 2026 www-project-threat-dragon Public OWASP Foundation Threat Dragon Project Web Repository Uh oh! There was an error while loading. Please reload this page. OWASP/www-project-threat-dragon's past year of commit activity HTML 93 Apache-2.0 28 0 2 Updated Aug 17, 2026 View all repositories People View all Top languages Loading… Uh oh! There was an error while loading. Please reload this page. Most used topics Loading… Uh oh! There was an error while loading. Please reload this page. Developer Program Member Footer © 2026 GitHub, Inc. Footer navigation Terms Privacy Security Status Community Docs Contact Manage cookies Do not share my personal information You can’t perform that action at this time.