owasp/secure-headers-projectOWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.
owasp/agentic-evidenceOWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…
owasp/mosaicCoordination structure for AI security standards and guidelines, reducing fragmentation and providing clear guidance for securing AI systems across…
owasp/owasp-top-10-neocloud-and-ai-data-center-security-risksOWASP framework cataloging the top 10 security risks in neocloud and AI data center infrastructure, covering hardware, networking, isolation,…
owasp/the-agents-epistemic-baggageAn audit-oriented risk model for how agent-generated inferences can change epistemic status, gain operational authority, and influence later…
owasp/ai-threat-modelerOWASP project for AI-assisted threat modeling, helping teams identify, analyze, and document security threats and mitigations in system designs.
owasp/robotics-security-testing-guideOWASP guide defining a standardized penetration testing methodology for humanoid, industrial, and autonomous robots, covering ROS/ROS2, DDS, CAN bus,…
owasp/owasp-subtractive-hardening-top-10The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…
dhotrey/awesome-cybersecA collection of awesome platforms, blogs, documents, books, resources and cool stuff about security
owasp/secretsifterOWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).
owasp/pscfOWASP framework providing structured security capabilities for software products, derived from regulatory and industry standards analysis to guide…
owasp/masweOWASP enumeration of common security and privacy weaknesses in mobile applications, serving as a reference bridging the MASVS verification standard…
owasp/german-owasp-dayGerman OWASP Day conference site & presentation archive
owasp/top10Official OWASP Top 10 Document Repository
owasp/api-securityOWASP-maintained Top 10 API security risks document and documentation portal with best practices for building, breaking, and defending APIs.
owasp/owasp-mcp-governance-and-risk-projectProject focused on governance and risk in application security, providing resources and frameworks for security maturity and risk management.
owasp/quantum-security-projectVendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…
genai-security-project/genai-llm-top10OWASP Top 10 for Large Language Model Applications
