Open source. Open possibilities.

OWASP Web Security Testing Guide is an open-source reference for testing web applications and services, with structured scenarios, versioned identifiers, stable documentation, and community contributions.

sqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over database servers, with a detection engine and features for fingerprinting, data fetching, file system access and OS command execution.

Shannon is an open-source, autonomous AI pentester for web applications and APIs. It analyzes your source code to find attack paths, then executes real exploits against a running app, reporting only vulnerabilities proven with a working proof of concept.

Official repository of the OWASP Cheat Sheet Series, a flagship OWASP project offering concise, high-value guidance on specific application security topics for developers building and securing applications.