Repositories list

• german-owasp-day

  Public
  German OWASP Day conference site & presentation archive

  HTML

  •1717 forks•2424 stars•55 issues•00 pull requests•Updated May 3, 2026May 3, 2026

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  javadockerkubernetes+ 16

  javadockerkubernetesawssecurityvaultazuregcpsecretsowasp+ 9

  Java

  •

  GNU Affero General Public License v3.0

  •551551 forks•1.4k1.4k stars•2323 issues•77 pull requests•Updated May 3, 2026May 3, 2026

• wrongsecrets-ctf-party

  Public

  OWASP/wrongsecrets-ctf-party’s past year of commit activity
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets

  gitdockerkubernetes+ 6

  gitdockerkubernetesawssecurityctftraining-materialsctfdhacktoberfest

  JavaScript

  •

  Apache License 2.0

  •173173 forks•5555 stars•55 issues•99 pull requests•Updated May 3, 2026May 3, 2026

• threat-dragon

  Public

  OWASP/threat-dragon’s past year of commit activity
  An open source threat modeling tool from OWASP

  owaspthreat-modelingsdlc+ 2

  owaspthreat-modelingsdlcthreat-dragonowasp-threat-dragon

  JavaScript

  •

  Apache License 2.0

  •367367 forks•1.5k1.5k stars•100100 issues•33 pull requests•Updated May 3, 2026May 3, 2026

• appsec-agent

  Public

  OWASP/appsec-agent’s past year of commit activity
  TypeScript

  •00 forks•22 stars•00 issues•00 pull requests•Updated May 3, 2026May 3, 2026

• mastg

  Public

  OWASP/mastg’s past year of commit activity
  The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes tech…

  androidiosstatic-analysis+ 16

  androidiosstatic-analysisreverse-engineeringhackingmobile-appandroid-applicationios-appdynamic-analysispentesting+ 9

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2.7k2.7k forks•13k13k stars•191191 issues•5555 pull requests•Updated May 3, 2026May 3, 2026

• cve-lite-cli

  Public

  OWASP/cve-lite-cli’s past year of commit activity
  Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output,…

  TypeScript

  •

  MIT License

  •1313 forks•102102 stars•1616 issues•00 pull requests•Updated May 3, 2026May 3, 2026

• Agent-Security-Regression-Harness

  Public

  OWASP/Agent-Security-Regression-Harness’s past year of commit activity
  Executable security regression testing for agentic applications and MCP-integrated systems.

  pythonmcpowasp+ 6

  pythonmcpowaspregression-testingappsecsecurity-testingai-securityllm-securityagent-security

  Python

  •

  Apache License 2.0

  •88 forks•1414 stars•1111 issues•33 pull requests•Updated May 3, 2026May 3, 2026

• www-project-noir

  Public
  Attack surface detector that identifies endpoints by static analysis

  HTML

  •

  Other

  •44 forks•66 stars•00 issues•00 pull requests•Updated May 3, 2026May 3, 2026

• AISVS

  Public

  OWASP/AISVS’s past year of commit activity
  The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the …

  aisecurity

  aisecurity

  Creative Commons Attribution Share Alike 4.0 International

  •6363 forks•141141 stars•1515 issues•33 pull requests•Updated May 3, 2026May 3, 2026

• www-project-threatatlas

  Public

  OWASP/www-project-threatatlas’s past year of commit activity
  OWASP ThreatAtlas is a collaborative platform for community-driven threat modeling.

  TypeScript

  •

  Apache License 2.0

  •1515 forks•4949 stars•22 issues•11 pull request•Updated May 3, 2026May 3, 2026

• APTS

  Public

  OWASP/APTS’s past year of commit activity
  OWASP Autonomous Penetration Testing Standard

  Python

  •

  Other

  •7979 forks•624624 stars•11 issue•11 pull request•Updated May 3, 2026May 3, 2026

• owasp.github.io

  Public

  OWASP/owasp.github.io’s past year of commit activity
  OWASP Foundation main site repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •316316 forks•644644 stars•44 issues•22 pull requests•Updated May 3, 2026May 3, 2026

• nest-schema

  Public

  OWASP/nest-schema’s past year of commit activity
  OWASP Schema

  pythonschemajson-schema+ 4

  pythonschemajson-schemaowaspmkdocsyaml-schemaowasp-nest

  Python

  •

  MIT License

  •1010 forks•66 stars•360360 issues•00 pull requests•Updated May 3, 2026May 3, 2026

• www-project-agent-memory-guard

  Public

  OWASP/www-project-agent-memory-guard’s past year of commit activity
  OWASP Foundation web repository

  Python

  •

  Other

  •22 forks•11 star•1010 issues•11 pull request•Updated May 3, 2026May 3, 2026

• www-project-secure-headers

  Public

  OWASP/www-project-secure-headers’s past year of commit activity
  The OWASP Secure Headers Project

  httpsecurityweb+ 4

  httpsecuritywebowaspsecureheadersappsec

  Python

  •

  Apache License 2.0

  •4545 forks•194194 stars•11 issue•00 pull requests•Updated May 3, 2026May 3, 2026

• GitHub-Workflow-Updater-Extension

  Public
  TypeScript

  •

  MIT License

  •11 fork•22 stars•00 issues•33 pull requests•Updated May 2, 2026May 2, 2026

• pytm

  Public

  OWASP/pytm’s past year of commit activity
  A Pythonic framework for threat modeling

  diagramdataflowthreat-modeling+ 7

  diagramdataflowthreat-modelingthreatssequence-diagramsecure-developmentdata-flow-diagramdfdpythonic-frameworkthreat-modeling-from-code

  Python

  •

  Other

  •219219 forks•1.1k1.1k stars•4444 issues•2525 pull requests•Updated May 2, 2026May 2, 2026

• Nest

  Public
  Your gateway to OWASP. Discover, engage, and help shape the future!

  reactpythongraphql+ 8

  reactpythongraphqldjangotypescriptrestnextjsgsoctailwindcsstypescript-react+ 1

  Python

  •

  MIT License

  •630630 forks•411411 stars•278278 issues•6767 pull requests•Updated May 2, 2026May 2, 2026

• www-project-ai-security-and-privacy-guide

  Public

  OWASP/www-project-ai-security-and-privacy-guide’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •9898 forks•381381 stars•1010 issues•33 pull requests•Updated May 2, 2026May 2, 2026

• www-chapter-indraprastha-institute-of-information-technology

  Public

  OWASP/www-chapter-indraprastha-institute-of-information-technology’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •11 fork•11 star•00 issues•00 pull requests•Updated May 2, 2026May 2, 2026

• OpenCRE

  Public

  OWASP/OpenCRE’s past year of commit activity
  securitysecurity-auditstandards

  securitysecurity-auditstandards

  Python

  •

  Creative Commons Zero v1.0 Universal

  •118118 forks•154154 stars•8888 issues•7676 pull requests•Updated May 2, 2026May 2, 2026

• www-project-it-grc

  Public

  OWASP/www-project-it-grc’s past year of commit activity
  OWASP Foundation Web Respository

  Python

  •2525 forks•8080 stars•00 issues•00 pull requests•Updated May 2, 2026May 2, 2026

• Nettacker

  Public

  OWASP/Nettacker’s past year of commit activity
  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

  pythonsecurityautomation+ 17

  pythonsecurityautomationscannerbruteforceowasppenetration-testingpentestingreconcve+ 10

  Python

  •

  Apache License 2.0

  •1.1k1.1k forks•5.1k5.1k stars•8080 issues•145145 pull requests•Updated May 2, 2026May 2, 2026

• cornucopia

  Public

  OWASP/cornucopia’s past year of commit activity
  The source files and tools needed to build the OWASP Cornucopia decks in various languages

  cardgamegamescard-games+ 6

  cardgamegamescard-gamesowaspgamificationgameserverthreat-modelingappsecrequirements-analysis

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •9696 forks•125125 stars•4242 issues•1919 pull requests•Updated May 2, 2026May 2, 2026

• www-project-developer-guide

  Public

  OWASP/www-project-developer-guide’s past year of commit activity
  OWASP Project Developer Guide - Document and Project Web pages

  owaspowasp-developer-guide

  owaspowasp-developer-guide

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2828 forks•116116 stars•00 issues•33 pull requests•Updated May 1, 2026May 1, 2026

• Teach-AppSec

  Public

  OWASP/Teach-AppSec’s past year of commit activity
  GNU General Public License v2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026

• www-chapter-bristol-uk

  Public

  OWASP/www-chapter-bristol-uk’s past year of commit activity
  OWASP Foundation Bristol UK chapter

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •77 forks•11 star•00 issues•33 pull requests•Updated May 1, 2026May 1, 2026

• www-project-threat-dragon

  Public

  OWASP/www-project-threat-dragon’s past year of commit activity
  OWASP Foundation Threat Dragon Project Web Repository

  owaspappsecsecurity-tools

  owaspappsecsecurity-tools

  HTML

  •

  Apache License 2.0

  •2929 forks•9292 stars•00 issues•33 pull requests•Updated May 1, 2026May 1, 2026

• www-project-nightingale

  Public

  OWASP/www-project-nightingale’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •44 forks•99 stars•00 issues•00 pull requests•Updated May 1, 2026May 1, 2026