Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submissio…

WebGoat is a deliberately insecure application

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST),…

OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale.

A sample Spring-based application

Vulnerable Java based Web Application

Purposely vulnerable Java application to help lead secure coding workshops

Contrib repository for the OpenTelemetry Collector

OpenTelemetry Go API and SDK

OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.

Transformer implementation to concatenate Log4j2Plugins.dat files

Java SDK for Contrast Security

The OWASP Benchmark GitHub repo has moved to: https://github.com/OWASP-Benchmark/BenchmarkJava

Simple error handling primitives