threat-modeling-playbook
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
curated-resourcesdevsecopseducation+3
40
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
owasp/mosaicCoordination structure for AI security standards and guidelines, reducing fragmentation and providing clear guidance for securing AI systems across…
owasp/vulnerable-container-hubVULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security
owasp/community-security-promptsA curated library of security prompts for AI-assisted security testing, threat modeling, and educational exercises.
owasp/owasp-model-card-security-standardOpen standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…
owasp/agent-skills-security-standardSecurity standard for agent skills, providing guidelines and best practices to secure AI-driven autonomous agents in cloud and API environments.
owasp/threat-model-cookbookThis project is about creating and publishing threat model examples.
nexaiceo/nexus-osThe Governed Agentic AI Operating System — Rust + Tauri 2.0 | 65 crates, 658 commands, 84 pages, 5,029 tests, 10/10 OWASP
josh-blythe/bordair-multimodalOpen-source cross-modal and multimodal prompt injection test suite. 250,000+ attack payloads across text, image, document, and audio modalities.…
geeksikhsecurity/ai-tool-poisoning-guardFree security-baseline rule for Claude Code, Codex, and Cursor: treats MCP tool descriptions as untrusted input (OWASP MCP Top 10 MCP03,…
ghostwolflab/ai_security_topA structured knowledge base covering AI security fundamentals, threat modeling, red team offensive techniques, and blue team defenses, including LLM…
chrislockard/api_wordlistA wordlist of API names for web application assessments
net-hunter121/api-wordlistCurated wordlists of API function names, verbs, and nouns for fuzzing web application endpoints with Burp Suite Intruder.