OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Parser and evaluator for Content Security Policy directives.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

secureCodeBox (SCB) - continuous secure delivery out of the box

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +44 frameworks worldwide: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber and so much more

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

Corax for Java: A general static analysis framework for java code checking.

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Full-stack .Net 8 Clean Architecture (Microservices, Modular Monolith, Monolith), Blazor, Angular 17, React 18, Vue 3, BFF with YARP, Domain-Driven Design, CQRS, SOLID, Asp.Net Core Identity Custom Storage, OpenID Connect, Entity Framework Core, Selenium, SignalR, Hosted Services, Health Checks, Rate Limiting, Cloud Services (Azure, AWS, Google)...

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

OWASP CRS (Official Repository)

I love to teach dotnet concepts in a simple way with real world examples to people who aspire to to be a dotnet developer. I also help developers to refresh their memory with easy to understand analogy.

Public website cyclonedx.org

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library