This is the official OWASP Cheat Sheet Series repository, providing concise, actionable security guidance for developers. It contains over 150 markdown cheat sheets covering web application security, cloud security, AI security, and more. The repository is primarily a documentation project but includes a sophisticated build system (MkDocs, Docker, CI/CD) and tooling for quality assurance: markdown linting, link checking, text linting, and automated PR review agents. The link checker is a standout reusable component with modular architecture. The project is actively maintained with strict quality gates and a well-defined contribution process.
The OWASP Web Security Testing Guide (WSTG) is a comprehensive, community-maintained documentation project defining standard test cases for web application security assessments. It is primarily a structured knowledge base written in Markdown, organized by testing categories including Information Gathering, Authentication, Injection, and API Testing. The repository also serves as the source for multiple derived artifacts: a Jekyll static website (wstg.owasp.org), downloadable PDF/EPUB ebooks via a Pandoc+Typst pipeline, and machine-readable test checklists in JSON, XLSX, and Markdown formats. The build infrastructure includes Python scripts for site generation and navigation, GitHub Actions for CI/CD (linting, link checking, deployment), and a versioned release process that supports multiple channels (latest, stable, past versions). Although the primary content is documentation, the repository functions as a publication platform with significant automation and is actively maintained by a community of contributors. It is not a software application in the traditional sense, but the build tooling and CI/CD pipelines qualify it as an application-focused project with strong data engineering characteristics in its checklist generation and structured content management.
This repository is a comprehensive, curated collection of cybersecurity study plans covering 20+ specialized domains such as application security, cloud security (AWS/Azure/GCP), DevSecOps, threat modeling, GRC, GenAI security, and more. It is not a software application or data research project; rather, it is a knowledge base of structured markdown roadmaps designed to guide learners and professionals through role-specific cybersecurity skill development. The plans reference up-to-date frameworks (OWASP Top 10:2025, NIST CSF 2.0, EU AI Act), include curated resources (books, videos, courses, certifications), and are consistently maintained. The repository has high community engagement (5k+ stars) and remains actively updated, though it contains no executable code, data pipelines, or notebooks.
This repository serves as the central community hub for the freeRASP mobile security SDK. It does not contain any source code itself; instead, it aggregates platform-specific implementations (Android, iOS, Flutter, React Native, etc.) via Git submodules. The actual security detection logic, integration APIs, and threat monitoring are implemented in the respective submodule repositories. This meta-repo provides documentation, issue tracking, and release coordination across platforms. It is well-maintained with active issue triage and a CI workflow for issue monitoring. The project is licensed under MIT with a fair usage policy.