HoneySAP
owasp/honeysapHoneySAP: SAP Low-interaction research honeypot
educationnetwork-securitythreat-intelligence
owasp/honeysapHoneySAP: SAP Low-interaction research honeypot
owasp/packmanA documentation and tracking project with the goal of making package management systems more secure.
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
owasp/mosaicCoordination structure for AI security standards and guidelines, reducing fragmentation and providing clear guidance for securing AI systems across…
owasp/vulnerable-container-hubVULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security
owasp/ai-vulnerabilities-playgroundHands-on AI security lab platform with 50+ scenarios across prompt injection, agentic system exploitation, model manipulation, and MCP trust boundary…
owasp/community-security-promptsA curated library of security prompts for AI-assisted security testing, threat modeling, and educational exercises.
owasp/owasp-top-10-ai-infrastructure-security-risksA practical framework identifying and prioritizing the top security risks in AI datacenter infrastructure, covering hardware, networking, management…
owasp/owasp-model-card-security-standardOpen standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…
owasp/wafecStructured evaluation criteria framework for assessing Web Application Firewalls (WAFs), enabling users, vendors, and third parties to compare…
owasp/agent-skills-security-standardSecurity standard for agent skills, providing guidelines and best practices to secure AI-driven autonomous agents in cloud and API environments.
owasp/damn-vulnerable-ml-modelIntentionally vulnerable machine learning model for hands-on security training. Explore common ML vulnerabilities, adversarial attacks, and defensive…
owasp/intrusion-alert-educational-network-idsLightweight Python-based IDS that monitors network traffic in real-time using Scapy, detecting DoS/DDoS attacks via per-IP request rate analysis with…