OWASP Resources

Access our comprehensive collection of security tools, documentation, training materials, and guidelines. Everything you need to build secure applications and advance your security knowledge.

Featured Resources

Our most popular and widely-used security resources and tools.

Guide

2.5M+

OWASP Top 10

The most critical web application security risks

Tool

1.8M+

OWASP ZAP

Free penetration testing tool for web applications

Standard

850K+

OWASP ASVS

Application Security Verification Standard

Platform

1.2M+

WebGoat

Deliberately insecure web application for learning

Reference

3.1M+

OWASP Cheat Sheets

Concise guides for specific security topics

Tool

950K+

Dependency-Check

Identifies project dependencies with known vulnerabilities

Most Downloaded This Month

OWASP Top 10

2.5M downloads

Cheat Sheets

3.1M downloads

OWASP ZAP

1.8M downloads

WebGoat

1.2M downloads

Corporate Supporters

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

Quick Links

Projects Chapters Events About Visit Store

Legal

Privacy Sitemap Contact

Socials

LinkedIn GitHub X (Twitter)Facebook YouTube

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.