cve-lite-cli
owasp/cve-lite-cliFast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…
code-analysiscurated-resourcesdevsecops+5
owasp/cve-lite-cliFast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…
owasp/owasp-istgThe IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility to adapt…
owasp/browser-security-projectCommunity-driven project providing guidance and resources to improve browser security, including best practices and educational materials for…
owasp/asvsApplication Security Verification Standard
owasp/aisvsThe AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to…
owasp/user-security-storiesRepo to hold mapping of user-security-stories
owasp/owasp-cstgVendor-neutral cloud security testing guide with structured phases for enumeration, privilege escalation, lateral movement, and post-exploitation…
owasp/owasp-mcp-governance-and-risk-projectProject focused on governance and risk in application security, providing resources and frameworks for security maturity and risk management.
owasp/packmanA documentation and tracking project with the goal of making package management systems more secure.
owasp/vulnerable-container-hubVULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
owasp/mosaicCoordination structure for AI security standards and guidelines, reducing fragmentation and providing clear guidance for securing AI systems across…
owasp/owasp-top-10-ai-infrastructure-security-risksA practical framework identifying and prioritizing the top security risks in AI datacenter infrastructure, covering hardware, networking, management…
owasp/community-security-promptsA curated library of security prompts for AI-assisted security testing, threat modeling, and educational exercises.
owasp/owasp-huntingCurated collection of payloads for ethical security testing and bug bounty hunting, covering common web vulnerabilities and attack vectors.