Resources
CheatSheetSeries
OWASP/CheatSheetSeries
The official OWASP Cheat Sheet Series, a concise collection of high-value application security guidance and best practices organized by topic.
Topics
Related projects
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
dependency-track4.4kA self-hosted software supply chain analysis platform that uses SBOMs to identify components and known vulnerabilities across projects, helping teams manage open-source dependency risk.
nginx-tuning2.7kA practical guide to tuning NGINX for best performance, covering worker processes, caching, gzip, TLS, connection limits and basic DDoS mitigation, with annotated configuration snippets and reference links.
npm-security-best-practices1.3kA curated list of npm security best practices covering supply-chain hardening, lockfile integrity, and safer package installs, with copy-paste configurations for npm and pnpm.- DevSecOpsGuideline1.2kThe OWASP DevSecOps Guideline explains how to build a secure CI/CD pipeline, embedding security practices and tools across the SDLC. It is a reference and learning resource for teams adopting shift-left security.
zaproxy16.2kZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.