Repositories list

• cornucopia

  Public

  OWASP/cornucopia’s past year of commit activity
  The source files and tools needed to build the OWASP Cornucopia decks in various languages

  cardgamegamescard-games+ 6

  cardgamegamescard-gamesowaspgamificationgameserverthreat-modelingappsecrequirements-analysis

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •9494 forks•124124 stars•4747 issues•2525 pull requests•Updated Apr 20, 2026Apr 20, 2026

• www-project-ai-security-and-privacy-guide

  Public

  OWASP/www-project-ai-security-and-privacy-guide’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •9595 forks•373373 stars•1010 issues•44 pull requests•Updated Apr 20, 2026Apr 20, 2026

• german-owasp-day

  Public

  OWASP/german-owasp-day’s past year of commit activity
  German OWASP Day conference site & presentation archive

  HTML

  •1717 forks•2424 stars•33 issues•11 pull request•Updated Apr 20, 2026Apr 20, 2026

• mastg

  Public

  OWASP/mastg’s past year of commit activity
  The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes tech…

  androidiosstatic-analysis+ 16

  androidiosstatic-analysisreverse-engineeringhackingmobile-appandroid-applicationios-appdynamic-analysispentesting+ 9

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2.7k2.7k forks•13k13k stars•190190 issues•5151 pull requests•Updated Apr 20, 2026Apr 20, 2026

• open-sammy

  Public

  OWASP/open-sammy’s past year of commit activity
  Open SAMMY codebase

  PHP

  •

  Creative Commons Attribution Share Alike 4.0 International

  •1313 forks•2424 stars•22 issues•55 pull requests•Updated Apr 20, 2026Apr 20, 2026

• wrongsecrets

  Public

  OWASP/wrongsecrets’s past year of commit activity
  Vulnerable app with examples showing how to not use secrets

  javadockerkubernetes+ 16

  javadockerkubernetesawssecurityvaultazuregcpsecretsowasp+ 9

  Java

  •

  GNU Affero General Public License v3.0

  •549549 forks•1.4k1.4k stars•2323 issues•66 pull requests•Updated Apr 20, 2026Apr 20, 2026

• www-project-docksec

  Public

  OWASP/www-project-docksec’s past year of commit activity
  OWASP Foundation web repository

  Python

  •

  MIT License

  •11 fork•00 stars•00 issues•1414 pull requests•Updated Apr 20, 2026Apr 20, 2026

• owasp.github.io

  Public
  OWASP Foundation main site repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •314314 forks•643643 stars•44 issues•33 pull requests•Updated Apr 20, 2026Apr 20, 2026

• OpenCRE

  Public

  OWASP/OpenCRE’s past year of commit activity
  securitysecurity-auditstandards

  securitysecurity-auditstandards

  Python

  •

  Creative Commons Zero v1.0 Universal

  •116116 forks•151151 stars•9292 issues•7575 pull requests•Updated Apr 20, 2026Apr 20, 2026

• www-chapter-london

  Public

  OWASP/www-chapter-london’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •5858 forks•1212 stars•00 issues•00 pull requests•Updated Apr 19, 2026Apr 19, 2026

• Nest

  Public

  OWASP/Nest’s past year of commit activity
  Your gateway to OWASP. Discover, engage, and help shape the future!

  reactpythongraphql+ 10

  reactpythongraphqldjangotypescriptrestnextjsgsoctailwindcsstypescript-react+ 3

  Python

  •

  MIT License

  •632632 forks•412412 stars•275275 issues•6969 pull requests•Updated Apr 19, 2026Apr 19, 2026

• threat-dragon

  Public

  OWASP/threat-dragon’s past year of commit activity
  An open source threat modeling tool from OWASP

  owaspthreat-modelingsdlc+ 2

  owaspthreat-modelingsdlcthreat-dragonowasp-threat-dragon

  JavaScript

  •

  Apache License 2.0

  •363363 forks•1.4k1.4k stars•100100 issues•1616 pull requests•Updated Apr 19, 2026Apr 19, 2026

• maswe

  Public

  OWASP/maswe’s past year of commit activity
  The Mobile Application Security Weakness Enumeration (MASWE) is a list of common security and privacy weaknesses in mobile apps. It is intended to be used as a …

  securityprivacymobile-app+ 4

  securityprivacymobile-appmobile-privacyowasp-mobileweaknessmaswe

  Creative Commons Attribution Share Alike 4.0 International

  •1515 forks•2525 stars•9595 issues•1111 pull requests•Updated Apr 19, 2026Apr 19, 2026

• APTS

  Public

  OWASP/APTS’s past year of commit activity
  OWASP Autonomous Penetration Testing Standard

  HTML

  •

  Other

  •1818 forks•116116 stars•00 issues•66 pull requests•Updated Apr 19, 2026Apr 19, 2026

• www-project-secure-headers

  Public

  OWASP/www-project-secure-headers’s past year of commit activity
  The OWASP Secure Headers Project

  httpsecurityweb+ 4

  httpsecuritywebowaspsecureheadersappsec

  Python

  •

  Apache License 2.0

  •4545 forks•194194 stars•11 issue•00 pull requests•Updated Apr 19, 2026Apr 19, 2026

• Nettacker

  Public

  OWASP/Nettacker’s past year of commit activity
  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

  pythonsecurityautomation+ 17

  pythonsecurityautomationscannerbruteforceowasppenetration-testingpentestingreconcve+ 10

  Python

  •

  Apache License 2.0

  •1.1k1.1k forks•5k5k stars•8181 issues•143143 pull requests•Updated Apr 18, 2026Apr 18, 2026

• www-project-vulnerable-ai-factory

  Public

  OWASP/www-project-vulnerable-ai-factory’s past year of commit activity
  OWASP Foundation web repository

  HTML

  •

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 18, 2026Apr 18, 2026

• www-project-operational-technology-top-10

  Public

  OWASP/www-project-operational-technology-top-10’s past year of commit activity
  OWASP Foundation web repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •1010 forks•2323 stars•77 issues•22 pull requests•Updated Apr 18, 2026Apr 18, 2026

• wrongsecrets-ctf-party

  Public

  OWASP/wrongsecrets-ctf-party’s past year of commit activity
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets

  gitdockerkubernetes+ 6

  gitdockerkubernetesawssecurityctftraining-materialsctfdhacktoberfest

  JavaScript

  •

  Apache License 2.0

  •173173 forks•5555 stars•66 issues•1919 pull requests•Updated Apr 18, 2026Apr 18, 2026

• www-project-vulnerability-management-guide

  Public

  OWASP/www-project-vulnerability-management-guide’s past year of commit activity
  OWASP Foundation Web Respository

  owaspcybersecurityvulnerability-management

  owaspcybersecurityvulnerability-management

  HTML

  •1010 forks•3232 stars•11 issue•22 pull requests•Updated Apr 17, 2026Apr 17, 2026

• www-chapter-panama-city

  Public

  OWASP/www-chapter-panama-city’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •44 forks•00 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• www-chapter-austin

  Public

  OWASP/www-chapter-austin’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •1111 forks•44 stars•00 issues•22 pull requests•Updated Apr 17, 2026Apr 17, 2026

• AISVS

  Public

  OWASP/AISVS’s past year of commit activity
  The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the …

  aisecurity

  aisecurity

  Creative Commons Attribution Share Alike 4.0 International

  •6060 forks•127127 stars•1212 issues•44 pull requests•Updated Apr 17, 2026Apr 17, 2026

• www-chapter-kathmandu

  Public

  OWASP/www-chapter-kathmandu’s past year of commit activity
  OWASP Foundation Web Respository

  CSS

  •11 fork•88 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• wstg

  Public

  OWASP/wstg’s past year of commit activity
  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  securityguidebest-practices+ 8

  securityguidebest-practiceshackingowasppenetration-testingapplication-securitypentestingbugbountyappsec+ 1

  Creative Commons Attribution Share Alike 4.0 International

  •1.6k1.6k forks•9.1k9.1k stars•3737 issues•88 pull requests•Updated Apr 17, 2026Apr 17, 2026

• CheatSheetSeries

  Public

  OWASP/CheatSheetSeries’s past year of commit activity
  The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

  securitycodebest-practices+ 4

  securitycodebest-practicesowaspapplication-securityappseccheatsheets

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •4.4k4.4k forks•32k32k stars•3636 issues•1919 pull requests•Updated Apr 16, 2026Apr 16, 2026

• www-chapter-minneapolis-st-paul

  Public

  OWASP/www-chapter-minneapolis-st-paul’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •66 forks•33 stars•00 issues•22 pull requests•Updated Apr 16, 2026Apr 16, 2026

• www-chapter-switzerland

  Public

  OWASP/www-chapter-switzerland’s past year of commit activity
  OWASP Foundation Web Respository

  HTML

  •77 forks•1111 stars•00 issues•22 pull requests•Updated Apr 16, 2026Apr 16, 2026

• www-project-smart-contract-top-10

  Public

  OWASP/www-project-smart-contract-top-10’s past year of commit activity
  OWASP Smart Contract Top 10

  HTML

  •

  Other

  •2525 forks•6969 stars•00 issues•00 pull requests•Updated Apr 16, 2026Apr 16, 2026

• www-event-appsecil

  Public

  OWASP/www-event-appsecil’s past year of commit activity
  SCSS

  •1414 forks•11 star•11 issue•11 pull request•Updated Apr 16, 2026Apr 16, 2026