cheatsheetseries

The OWASP Cheat Sheet Series is the official repository of a flagship Open Worldwide Application Security Project (OWASP) effort to give builders practical security guidance for their applications. Its purpose is to provide a concise collection of high-value information on specific application security topics, organised as individual cheat sheets. Content and how to read it The authoritative, referenceable version of the material lives on the project's official website (cheatsheetseries.owasp.org). The Markdown files in this repository are the working sources and, as the README explicitly states, are not intended to be referenced in external documentation, books or websites. Project details without the cheat sheets are shown on the main OWASP website. A prebuilt ZIP archive of the offline website is also offered for download. Building and checking locally The site can be built and served locally with Python 3 using make targets: install the Python requirements, generate the site, then serve it on port 8000. Container builds are documented for both Docker and Podman (build an image and run it with port 8000 published). For quality control, npm scripts are provided to lint Markdown and terminology, plus auto-fix variants for each. Contributing The project actively invites new contributors. Two guides are pointed to first: the contribution guide and a how-to-make-a-cheatsheet guide. Suggested first steps include proofreading existing content for spelling and grammar, picking up an existing GitHub issue and submitting a pull request, or opening a new issue to report an improvement opportunity. A Slack invitation link and a dedicated #cheatsheets channel are provided for questions, ideas and discussion. Team, history and licensing Project leaders listed are Jim Manico, Jakub Maćkowski and Gabriel Corona, with a core team of Kevin W. Wall and Shlomo Zalman Heigh. The project history distinguishes a V1 phase from 2014 to 2018 hosted on the OWASP Wiki and a V2 phase from 2019 onwards hosted on GitHub, with named special thanks for help during the migration. Contributors are listed in a contributor file for V1 and via GitHub contributor graphs for the current version. The repository is published under a Creative Commons Attribution-ShareAlike 4.0 licence, and OWASP and Open Worldwide Application Security Project are noted as registered trademarks of the OWASP Foundation, Inc.