OWASP Projects

This is a test dashboard - feedback appreciated.

The tables are manually ordered by stars so may become out of date, particularly amongst the projects with the least number of stars 😉

There are separate tables for:

• Tools
• Standards and Documentation Projects

Tools

Repo	Status	Last Commit	Committers	Stars
owasp zap
owasp amass
owasp juice shop
owasp webgoat
owasp dependency check
owasp defectdojo
owasp nettacker
owasp find security bugs
owasp owtf
owasp dependency track
owasp modsecurity core rule set
owasp security shepherd
owasp coraza
owasp railsgoat
owasp java html sanitizer
owasp security knowledge framework
owasp maryam
owasp ontology driven threat modeling framework
owasp securecodebox
owasp esapi
owasp benchmark java
owasp wrongsecrets
owasp osaft
owasp securetea project
owasp risk assessment framework
owasp mobile audit
owasp antisamy
owasp securityrat
owasp code pulse
owasp pygoat
owasp patton
owasp application gateway
owasp single sign-on
owasp csrfguard
owasp bug logging tool
owasp securebank
owasp intelligent intrusion detection system
owasp winfim.net
owasp cornucopia
owasp g0rking

Standards and Documentation projects

Repo	Status	Last Commit	Committers	Stars
owasp cheat sheet series
owasp mobile application security
owasp web security testing guide
owasp go secure coding practices guide
owasp top ten
owasp asvs
owasp torbot
owasp api security project
owasp vulnerable web applications directory
owasp docker top 10
owasp devsecops guideline
owasp cloud-native security project
owasp samm
owasp threat model cookbook
owasp appsensor
owasp serverless top 10
owasp iot security verification standard
owasp software component verification standard
owasp proactive controls
owasp honeypot
owasp secure headers project
owasp automated threats to web applications
owasp security pins
owasp threat and safeguard matrix (tasm)
owasp top 10 low-code/no-code security risks
owasp cloud-native application security top 10
owasp threat modeling playbook (otmp)
owasp vulnerability management guide
owasp appsec pipeline
owasp security culture
owasp security qualitative metrics

Template line for GitHub projects (replace NAME, STATUS and USER_REPO):

| [NAME](https://github.com/USER_REPO) | STATUS | [![Last Commit](https://img.shields.io/github/last-commit/USER_REPO)](https://github.com/USER_REPO/commits) | [![Contributors](https://img.shields.io/github/contributors/USER_REPO)](https://github.com/USER_REPO/graphs/contributors) | [![Stars](https://img.shields.io/github/stars/USER_REPO)](https://github.com/USER_REPO/stargazers) |

Status should be one of:

• 
• 
• 
•