Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0

🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.

A small tool to help developers understand a huge set of security requirements from appsec teams

OWASP ASVS Security Evaluation Templates with Nuclei

Penetration Testing Checklist

OWASP Application Security Verification Standard 4.0 Checklist

OWASP Thick Client Application Security Verification Standard

Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.

Repository is based on OWASP Application Security Verification Standard 3.1

Improved bee microbiota characterization using routine 16S rRNA gene sequencing 🐝🧬

🥊 Automagically select the top ASVS security controls for a given Abuse Case using NLP.

A set of functions for effective ASV filtering in eDNA metabarcoding data on the basis of GMM

Assessors Studio enables CDXA operations: perform assessments, collect evidence, make claims, and issue machine-readable CycloneDX attestations, optionally legally binding for B2B and B2G use cases.

🐀 Import ASVS controls to SecurityRAT in the blink of an eye.

Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/

Interface for interacting with ASVS JSON files

Unified DevSecOps pipeline that runs OWASP ZAP, Semgrep, Trivy, and other security scanners with results mapped to OWASP ASVS v5 and exported to Allure reports. Built for CI/CD integration.

Use the OWASP Application Security Verification Standard as a Guide for Automated Unit and Integration Tests

DevSecOps, ASPM, Vulnerability Management

This is a parallel repository that covers the need to have a checklist for ASVS inspired by the MASVS checklist.

A comprehensive cybersecurity training platform implementing the OWASP ASVS Level 1 framework for vulnerability scanning, demonstration, and education.

A python implementation of the decontam R package for ASV filtering.

SecurityAudit CLI is a command-line tool for auditing .NET projects' security.

🔒 Enhance your development skills with the latest OWASP security best practices for building secure applications in Claude Code.

OWASP ASVS checklist for audits

Codex skill for OWASP ASVS 5.0 security reviews with control-mapped findings.