Core functionality of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

OWASP CRS (Official Repository)

Java web and command line applications demonstrating various security topics

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +41 frameworks worldwide: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber and so much more

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

DevSecOps, ASPM, Vulnerability Management. All on one platform.

OWASP Domain Protect - prevent subdomain takeover

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Create CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

OWASP Thick Client Application Security Verification Standard

Vulnerable app with examples showing how to not use secrets

An open source threat modeling tool from OWASP

Python implementation of OWASP CycloneDX