The Open Worldwide Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of software. Our mission is to make application security "visible," so that people and organizations can make informed decisions about application security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. The OWASP Foundation is a 501c3 not-for-profit charitable organization that ensures the ongoing availability and support for our work.
External link for OWASP® Foundation
300 Delaware Ave
Suite 210 # 384
Wilmington, Delaware 19801, US
OWASP® Foundation reposted this
Save the date on 3rd April 2027! New England's biggest application security conference will be back on 3rd April 2027 at Boston Marriott Cambridge! Early Bird tickets are now available on www.basconf.org Make sure to reserve your spot by buying the ticket while it lasts. Early bird closes on 30th September 2026!
Did you know OWASP members get exclusive access to a reserved instance of SecureFlag’s Secure-by-Design Enablement Platform? From secure design to secure code, the platform is built to help you ship safer features, faster. SecureFlag delivers: 📚 Secure Coding Training: Learn by doing with hands-on labs that mirror real projects, in live development environments. 🤖 AI-Powered Threat Modeling: Visualize and identify risks in seconds with ThreatCanvas. 📈 Measurable Impact: Spend 24% less time performing frustrating security reworks. Join engineers across 30+ countries who are building a secure-by-design culture. Claim your exclusive member benefit to the SecureFlag platform here: https://lnkd.in/exZc84xE Not an OWASP member? Join the community today! https://lnkd.in/evGuHnfc #OWASP #SecureFlag #SecureCodingTraining #ThreatModeling #SoftwareEngineering
The OWASP CTF is coming to #DEFCON34! Find real vulnerabilities, patch the code, submit a GitHub PR, and let CI validate your fix. Choose from 6 OWASP apps and 300+ challenges - and bring your AI tools! https://ctf.owasp.org
The OWASP CTF is coming to DEF CON 34! From August 7–9, join us at the Las Vegas Convention Center for a capture-the-flag experience built around the real secure-development workflow. Choose from six vulnerable OWASP applications and more than 300 challenges. Find real vulnerabilities, patch the code, submit a GitHub pull request, and let CI validate your fix automatically. AI tools are not only allowed - they’re encouraged. This isn’t just flag hunting. It’s your chance to practice the full journey from exploitation to secure remediation. Choose your target and get ready to ship the fix: https://ctf.owasp.org #OWASP #DEFCON34 #CTF #AppSec #Cybersecurity #SecureDevelopment #AI
Think you have what it takes to hack an IoT device? Join us at #DEFCON34 for “OWASP ISTG in Practice,” an immersive, beginner-friendly, CTF-style lab where you’ll explore hardware, uncover firmware secrets, attack network and application layers, and learn how to defend connected devices using the OWASP IoT Security Testing Guide. No experience necessary - just bring your curiosity! 📅 August 7, 12–2 p.m. PDT 📍 Las Vegas Convention Center, W4/1415 Register: https://luma.com/zpp2nq09 #OWASP #IoTSecurity #Cybersecurity #EthicalHacking #CTF
OWASP® Foundation reposted this
The G7 minimum elements make an important distinction: an AI SBOM describes the composition of the broader AI system — not just the model inside it.✨ For agentic systems, that distinction is especially relevant. The OWASP AIBOM Generator contributes one machine-readable part of that broader inventory by capturing detailed model information in CycloneDX format. The OWASP AIBOM Generator tackles a practical part of that larger problem: generating machine-readable, CycloneDX-based details about models that are part of a broader AI system inventory. At #HackerSummerCamp, Dmitry R. and I will show it in action: 🔹 OWASP AIBOM Generator — Arsenal 📅 August 8 | 14:00–15:00 📍 DEF CON 34 — AppSec Village™ Arsenal Come see us turn model metadata into something security and governance tooling can actually consume. OWASP GenAI Security Project OWASP GenAI Security Project - AIBOM Initiative Steve Wilson Scott Clinton Sandy Dunn John Sotiropoulos Keren Katz Emmanuel Guilherme Jason Ross Ron F. Del Rosario Sonu Kumar Talesh Seeparsan Bryan Nakayama Rock Lambros Idan Habler, PhD Kayla Underkoffler Evgeniy Kokuykin #DEFCON34 #AppSecVillage #OWASP #AIBOM #AISBOM #SBOM #AISupplyChain #AITransparency
The POD Room is back! 🎉 After an incredible response at Global AppSec EU in Vienna, we're bringing our hands-on activity POD Room to OWASP Global AppSec USA this November in San Francisco! 🌉 Have an interactive activity, workshop, or challenge you'd love to share with the community? We'd love to hear from you. Submit your idea today and join us in San Francisco, November 5–6! 👇 https://lnkd.in/ens8icyE
OWASP® Foundation reposted this
🔐 𝗢𝗪𝗔𝗦𝗣 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲𝗔𝗽𝗽 is growing — and we want you to be part of the journey. When we started building VulnerableApp, the goal was simple: Make security learning practical. Not just documentation. Not just slides. Not just vulnerability descriptions. A place where developers, security engineers, researchers, and students can actually explore vulnerabilities, understand attack paths, and learn how to build better defenses. Today, the community has grown to: 🐳 𝟴𝟬,𝟬𝟬𝟬+ Docker downloads for VulnerableApp 🐳 𝟯𝟴,𝟬𝟬𝟬+ Docker downloads for VulnerableApp-Facade 👥 𝟭𝟬𝟬+ contributors building and improving the platform 🍴 𝟭𝟬𝟬𝟬+ forks from the community across multiple projects ⭐ 𝟲𝟬𝟬+ GitHub stars across multiple projects Behind these numbers are people contributing ideas, writing code, creating vulnerability scenarios, improving documentation, and helping make security education more accessible. But there is still a lot to build. We are looking for contributors interested in: 🔹 Application Security 🔹 AI Security 🔹 Vulnerability research 🔹 Developer education 🔹 Open-source engineering You don't need to be a security expert. You can contribute by: 1. adding a new vulnerability lab 2. improving existing scenarios 3. enhancing the UI/UX 4. writing documentation 5. sharing ideas 6. raising feature/bug requests 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗸𝗻𝗼𝘄𝗹𝗲𝗱𝗴𝗲 𝗴𝗿𝗼𝘄𝘀 𝘄𝗵𝗲𝗻 𝘄𝗲 𝗯𝘂𝗶𝗹𝗱 𝗮𝗻𝗱 𝗹𝗲𝗮𝗿𝗻 𝘁𝗼𝗴𝗲𝘁𝗵𝗲𝗿. Join SasanLabs: https://lnkd.in/gYviePP https://lnkd.in/gJFQuE5C Let's build the next generation of hands-on security learning. #OpenSource #CyberSecurity #AppSec #OWASP #DevSecOps #AIsecurity #SasanLabs
OWASP® Foundation reposted this
Were you able to attend OWASP BASC 2026? If not, here is a small glimpse of it! 258 attendees, 22 talks and workshops & experts from several states and countries. All under one roof on a single day! There was something for everyone to learn and grow! We are excited to announce next year's conference on April 3rd 2027 back at Boston Marriott Cambridge! Early bird tickets get released on August 1st 2026 and available till Sept 30th only! Check out www.basconf.org for more details! #basc #owasp #basconf #appsec
💙 Love what OWASP does? Become a member! Your membership helps support the open-source projects, resources, local chapters, and community that make OWASP possible. Plus, you'll enjoy benefits like conference discounts, access to exclusive learning resources, an @owasp.org email address, and the opportunity to vote in OWASP elections, all while supporting the global community behind the projects and resources you rely on. Join today! 👉 https://lnkd.in/evGuHnfc #OWASP #AppSec #CyberSecurity #OpenSource