Results for “OWASP”

OWASP

Web application security

OWASP ZAP

OWASP Zed Attack Proxy (ZAP) web security testing tool.

OWASP Noir

Attack surface detector that identifies endpoints by static analysis.

qualys.com

Find web app vulnerabilities, audit for OWASP Risks

parasoft

copyright: — Automated Software Testing Solutions for unit-, API-, and web UI testing. Complies with MISRA, OWASP, and others.

PVS-Studio

copyright: — A ([conditionally free](https://pvs-studio.com/en/order/open-source-license) for FOSS and individual developers) static analysis of C, C++, C# and Java code. For advertising purposes [you can propose a large FOSS project for analysis by PVS employees](https://github.com/viva64/pvs-studio-check-list). Supports CWE mapping, OWASP ASVS, MISRA, AUTOSAR and SEI CERT coding standards.

StaticReviewer

copyright: — Static Reviewer executes code checks according to the most relevant Secure Coding Standards, OWASP, CWE, CVE, CVSS, MISRA, CERT, for 40+ programming languages, using 1000+ built-in validation rules for Security, Deadcode & Best Practices Available a module for Software Composition Analysis (SCA) to find vulnerabilities in open source and third party libraries.

WhiteHat Application Security Platform

copyright: — WhiteHat Scout (for Developers) combined with WhiteHat Sentinel Source (for Operations) supporting WhiteHat Top 40 and OWASP Top 10.

CVE Lite CLI

A free, open-source OWASP project that scans your project's lockfile for known vulnerabilities and hands you copy-and-run fix commands — dependency security that lives in your terminal instead of buried in a CI dashboard you check once a week.

OpenHack

A free, open-source, experimental framework from security firm Hadrian that turns a coding AI assistant like Claude Code or Cursor into a structured vulnerability-research team — complete with checkpointed progress and OWASP/MITRE-aligned expert agents.