Monorepo of OWASP Bug Logging Tool projects: crowd-sourced vulnerability reporting, bug bounty workflows, CVE namespace, autopatching, and security education.
OWASP BLT (Bug Logging Tool) is a community-driven OWASP Foundation project that develops and maintains open-source tools for structured vulnerability reporting, contributor rewards and security education. Every BLT project lives in this one repository, each in its own folder, with its full commit history.
git.owaspblt.org is the official source of truth for BLT. Please do all work there: clone from it, open issues and pull requests there, and discuss there. github.com/OWASP/BLT is a read-only mirror kept as a backup. It updates automatically, but issues and pull requests aren't accepted on it.
git clone https://git.owaspblt.org/BLT.git
cd BLT/<project> # e.g. blt-leaf; each project has its own README
Deploy a project with scripts/deploy.sh <project>, or every Cloudflare project with scripts/deploy.sh --all. See Deploying.
| Project | What it is | Live site |
|---|---|---|
| BLT-Action | GitHub Action that automates issue and pull request management: self-assignment, unassignment of stale issues and contributor prompts. | |
| BLT-API | BLT-API is a high-performance, edge-deployed REST API that interfaces with all aspects of the OWASP BLT (Bug Logging Tool) project. Built using Python on Clo... | api.owaspblt.org |
| BLT-Autopatch | Automated patching: proposes fixes for detected security issues. | |
| BLT-Byte | AI-powered assistant for bug bounty hunting and security research on the BLT (Bug Logging Tool) platform. | byte.owaspblt.org |
| BLT-CLI | A high-performance terminal user interface (TUI) client for the OWASP Bug Logging Tool (BLT) ecosystem. Built in Rust using Ratatui and Crossterm, blt-cli pr... | |
| BLT-Core | OWASP BLT (Bug Logging Tool) is a gamified crowd-sourced QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, ... | owaspblt.org |
| BLT-Cron | One Cloudflare Worker holds the account's only cron trigger ( ) and runs every BLT Worker's scheduled job on that job's own schedule. Cloudflare's free pl... | |
| BLT-CVE | A standards-driven, machine-readable, cryptographically verifiable, federated vulnerability namespace that runs entirely on Cloudflare static hosting and aut... | cve.owaspblt.org |
| BLT-Dash | A company cybersecurity dashboard that integrates with everything and gives a heads-up display single page of everything you need to see. | dash.owaspblt.org |
| BLT-Design | Static BLT design system for light/dark mode, logos, colors, typography, and copy-paste component patterns. | design.owaspblt.org |
| BLT-Design-Contest | Community design showcase for OWASP BLT. | contest.owaspblt.org |
| BLT-Docs | This repository contains the MkDocs Material source for OWASP Bug Logging Tool (BLT) documentation. It is the documentation hub for BLT user workflows, contr... | docs.owaspblt.org |
| BLT-Enforcement | IP / Trademarks defense tools related to cybersecurity and keeping organizations safe by enforcement. | enforcement.owaspblt.org |
| BLT-Extension | BLT is a Chrome extension that enables users to take screenshots or capture specific sections of webpages and quickly add them to the BLT website. This tool ... | extension.owaspblt.org |
| BLT-Flutter | OWASP BLT (Bug Logging Tool) is a powerful tool designed to allow everyone who uses the internet to help improve it. With BLT, users can submit any type of i... | flutter.owaspblt.org |
| BLT-Gitcaster | A real-time, AI-powered leaderboard of GitHub repository activity with live play-by-play commentary! Watch as repositories compete for the top spots with an ... | gitcaster.owaspblt.org |
| BLT-GSOC | This repository contains the Google Summer of Code (GSoC) pages for the OWASP BLT project, hosted as a static GitHub Pages site. | gsoc.owaspblt.org |
| BLT-Hackathons | A static hackathon platform for the BLT projects on git.owaspblt.org (and GitHub or GitLab projects) with charts, leaderboards, and prizes. | hackathons.owaspblt.org |
| BLT-HackerHouse | Real-time contributor visualization platform for OWASP BLT — now running on Cloudflare Workers. | hackerhouse.owaspblt.org |
| BLT-Ideas | BLT Ideas is a collection of brainstorming proposals for potential future development of OWASP BLT. Each idea is scoped to a standalone 350-hour development ... | ideas.owaspblt.org |
| BLT-Jobs | BLT Jobs is a Git-native job platform for the OWASP BLT ecosystem. Jobs and seeker profiles live as Markdown-backed open data in this repository, so the sour... | jobs.owaspblt.org |
| BLT-Ketchup | BLT Penetration Testing Collaboration Workspace A real-time collaboration environment for red-team engagements where multiple pentesters can share findings, ... | ketchup.owaspblt.org |
| BLT-Leaf | A simple one-page application to track and monitor GitHub Pull Request readiness status. | leaf.owaspblt.org |
| BLT-Lettuce | Slack bot for the OWASP BLT community: welcome messages, project discovery and contributor help. | lettuce.owaspblt.org |
| BLT-Mayo | BLT-MAYO stands for Monitor, Analyze, Yield, Observe. It is a read-only Linux security-auditing workflow that turns filesystem artifacts into structured, exp... | |
| BLT-MCP | An MCP (Model Context Protocol) server that provides AI agents and developers with structured access to the OWASP BLT (Bug Logging Tool) ecosystem. This serv... | mcp.owaspblt.org |
| BLT-Monitor | A Cloudflare Python Worker website monitor. It checks website availability and content every twenty minutes, stores recent history in Workers KV, and provide... | monitor.owaspblt.org |