
PwnzzAI
Hands-on AI security learning platform with intentionally vulnerable LLM applications. Explore OWASP Top 10 for LLMs through interactive pizza shop…

Hands-on AI security learning platform with intentionally vulnerable LLM applications. Explore OWASP Top 10 for LLMs through interactive pizza shop…

OWASP Certified Secure-Software Developer

OWASP Smart Contract Security (SCS) Project

OWASP guide for security champions, providing curated resources and learning paths to foster security culture and practices within development teams.

OWASP Learning Gateway Project

OWASP Security Culture repository

Centralized YAML-based knowledge base linking MITRE CWE, OWASP Top10, ASVS, and other security standards with versioned references. Includes MkDocs…

OWASP teaching modules covering application security fundamentals including risk management, secure software development, and operations security for…

OWASP hands-on Android security training lab with 78 MASVS/MASTG modules pairing vulnerable, secure, and attacker apps to demonstrate mobile…

A Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)

Golang Secure Coding Practices guide

Repo to hold mapping of user-security-stories

Structured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…

Structured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…

VULCONHUB provides access to files to build your own hands-on vulnerable container image to learn and practice security

Structured evaluation criteria framework for assessing Web Application Firewalls (WAFs), enabling users, vendors, and third parties to compare…

Atomic web vulnerability labs. One OWASP flaw per app — minimal Flask + Docker, intentionally broken for hands-on study with Burp Suite.