#owasp (30 Repositories)
Ranked open-source repositories tagged with #owasp, scored by pull request acceptance likelihood and maintainer engagement velocity.
72.2%
18.9h
30 repositories tagged #owasp
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
asamassekou10/ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
OWASP/www-project-web-security-testing-guide
The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.
OWASP/threat-dragon
An open source threat modeling tool from OWASP
OWASP/cornucopia
The source files and tools needed to build the OWASP Cornucopia decks in various languages
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
GaProgMan/OwaspHeaders.Core
Inject OWASP recommended HTTP Headers for increased security in a single line
KeyValueSoftwareSystems/agent-opfor
Open-source adversary emulation for AI agents and MCP servers.
OWASP/www-project-agent-memory-guard
OWASP Foundation web repository
DenisPodgurskii/pentestkit
OWASP PTK - application security browser extension.
coreruleset/coreruleset
OWASP CRS (Official Repository)
CycloneDX/transparency-exchange-api
A standard API specification for exchanging supply chain artifacts and intelligence
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
CycloneDX/cyclonedx-gomod
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
dependency-check/dependency-check-sonar-plugin
Integrates Dependency-Check reports into SonarQube
corazawaf/coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
secureCodeBox/secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
OWASP/CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
OWASP/www-project-secure-headers
The OWASP Secure Headers Project
OWASP/DockSec
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
owtf/owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
OWASP/owasp-java-encoder
Contextual output encoding for Java 8+: HTML, JavaScript, CSS, XML and URI components. Zero-dependency core with optional JSP and Jakarta adapters.
CycloneDX/cyclonedx-core-java
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
juice-shop/juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
jenkinsci/dependency-check-plugin
Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).