ASVS
owasp/asvsApplication Security Verification Standard
api-securitycode-analysiscurated-resources+3
owasp/asvsApplication Security Verification Standard
owasp/api-securityOWASP-maintained Top 10 API security risks document and documentation portal with best practices for building, breaking, and defending APIs.
owasp/aisvsThe AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to…
owasp/opencreInteractive platform linking security standards and guidelines for designing, developing, testing, and procuring secure software. Provides a unified…
owasp/user-security-storiesRepo to hold mapping of user-security-stories
owasp/owasp-mcp-governance-and-risk-projectProject focused on governance and risk in application security, providing resources and frameworks for security maturity and risk management.
owasp/owasp-cstgVendor-neutral cloud security testing guide with structured phases for enumeration, privilege escalation, lateral movement, and post-exploitation…
owasp/packmanA documentation and tracking project with the goal of making package management systems more secure.
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
owasp/mosaicCoordination structure for AI security standards and guidelines, reducing fragmentation and providing clear guidance for securing AI systems across…
owasp/vulnerable-container-hubVULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security
owasp/community-security-promptsA curated library of security prompts for AI-assisted security testing, threat modeling, and educational exercises.
owasp/owasp-top-10-ai-infrastructure-security-risksA practical framework identifying and prioritizing the top security risks in AI datacenter infrastructure, covering hardware, networking, management…
owasp/owasp-model-card-security-standardOpen standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…