owasp/mas-websiteThe OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and security professionals build, test, and secure mobile applications.
This repository contains the source and configuration for the OWASP Mobile Application Security Project website (mas.owasp.org).
This website aggregates, organizes, and presents documentation from the main MAS resources using MkDocs and the mkdocs-material theme.
Each resource lives in its own GitHub repository:
| Resource | Description | GitHub Repo |
|---|---|---|
 | MASVS (Mobile Application Security Verification Standard) The industry standard for mobile app security requirements. | OWASP/masvs |
 | MASWE (Mobile Application Security Weakness Enumeration) A categorized list of common security and privacy weaknesses in mobile apps. | OWASP/maswe |
 | MASTG (Mobile Application Security Testing Guide) A comprehensive manual for mobile app security testing and reverse engineering. | OWASP/mastg |
The two key components of the repo are:
docs/ directory, which contains all the source files for the website.mkdocs.yml file, which configures the MkDocs site.The site uses a range of MkDocs features and plugins in the mkdocs.yml file, including:
theme) with custom icons, logo, and palette switching (light/dark mode). See Material for MkDocs documentation for details.theme.features) for improved UX.plugins: search) with suggestions and sharing.plugins: tags) and blog (plugins: blog) plugins for dynamic content organization and news posts.plugins: awesome-pages) for flexible navigation structure.plugins: redirects) with custom Python hooks (hooks) for legacy and dynamic page redirects.hooks) for dynamic content, banners, cross-references, demo buttons, and more.markdown_extensions): meta, TOC with permalinks, admonition, tables, fenced code blocks, emoji, progress bars, tabbed content, snippets, and more.To build and serve the website locally see this guide.
GitHub Actions build and deploy the site on push to main (see .github/workflows/).
The workflow fetches the latest content from the upstream MASTG, MASVS, and MASWE repos before building.
Website improvements, bug fixes, and documentation updates are welcome! See our contributing guidelines for details.
extra_css, extra_javascript) for tables, navigation, filtering, and external links.extra.analytics).copyright) displayed in the footer.