owasp/owasp-top-10-ai-infrastructure-security-risksA practical framework identifying and prioritizing the top security risks in AI datacenter infrastructure, covering hardware, networking, management…
owasp/sbom-vex-taint-analysisAutomated SBOM-to-VEX pipeline using a secure multi-agent AI system to analyze CVEs, reason about exploitability, and generate signed CycloneDX VEX…
ghostwolflab/ai_security_topA structured knowledge base covering AI security fundamentals, threat modeling, red team offensive techniques, and blue team defenses, including LLM…
owasp/osibCentralized YAML-based knowledge base linking MITRE CWE, OWASP Top10, ASVS, and other security standards with versioned references. Includes MkDocs…
owasp/quantum-security-projectVendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…
owasp/owasp-scsOWASP Smart Contract Security (SCS) Project
pathakabhi24/llm-mcp-security-field-guideThe most comprehensive LLM + MCP security guide i.e. OWASP aligned, real CVEs, actionable checklists
owasp/api-securityOWASP-maintained Top 10 API security risks document and documentation portal with best practices for building, breaking, and defending APIs.
josh-blythe/bordair-multimodalOpen-source cross-modal and multimodal prompt injection test suite. 250,000+ attack payloads across text, image, document, and audio modalities.…
owasp/top10Official OWASP Top 10 Document Repository
husnainfareed/awesome-ethical-hacking-resources😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
j-dahl7/mcp-attack-detection-sentinelSentinel detection lab for MCP attack chains: CVE-2026-26118 SSRF token theft, tool poisoning, cross-server exfiltration, identity post-exploitation.…
dhotrey/awesome-cybersecA collection of awesome platforms, blogs, documents, books, resources and cool stuff about security
owasp/owasp-model-card-security-standardOpen standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…
owasp/owasp-subtractive-hardening-top-10The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…
merbinr/cve-2023-31606Documentation of CVE-2023-31606: a ReDoS vulnerability in Redcloth gem's sanitize_html function, with root cause analysis, CVSS 7.5 scoring, and…
paragonie/awesome-appsecA curated list of resources for learning about application security
owasp/masweOWASP enumeration of common security and privacy weaknesses in mobile applications, serving as a reference bridging the MASVS verification standard…
