WebGoat
WebGoat is a deliberately insecure application
About
WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons.
Open Source Health
- Stars
- 9,335
- Forks
- 7,883
- License
- Not stated
- Last commit
- 26 days ago
Related Categories
Vendor
OWASP WebGoat
Open-source project on GitHub: WebGoat
Quick Links
Open Source
Related Products
Burp AI Agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Top category match
Semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Top category match
Shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Top category match
Zaproxy
The ZAP by Checkmarx Core project
Top category match
WSTG
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Top category match