A community-driven platform for discovering, reporting, and tracking security vulnerabilities

🌐 Website • 📖 Contributing Guide • 💬 Join Slack • 🐛 Report Bug

OWASP BLT (Bug Logging Tool) is an open-source platform that democratizes bug bounties and security research. Built by the community for the community, BLT makes it easy for security researchers, developers, and organizations to collaborate on finding and fixing security vulnerabilities.

• 🔍 Bug Discovery & Reporting - Discover and report security vulnerabilities across various applications and websites
• 🏆 Rewards & Recognition - Earn rewards, badges, and recognition for your contributions to web security
• 👥 Community Driven - Join a vibrant community of security researchers and developers
• 🎮 Gamification - Leaderboards, challenges, and competitions to make security research engaging
• 💰 Staking System - Innovative blockchain-based reward system for contributors
• 📊 Comprehensive Dashboard - Track your progress, statistics, and impact
• 🌐 Open Source - Built with transparency and collaboration at its core
• 🛡️ OWASP Project - Part of the Open Worldwide Application Security Project family

• Python 3.11.2+
• PostgreSQL
• Docker & Docker Compose (recommended)

# Clone the repository
git clone https://github.com/OWASP-BLT/BLT.git
cd BLT

# Configure environment
cp .env.example .env

# Build and start
docker-compose build
docker-compose up

Access the application at http://localhost:8000

# Install dependencies
pip install poetry
poetry shell
poetry install

# Set up database
python manage.py migrate
python manage.py loaddata website/fixtures/initial_data.json
python manage.py createsuperuser

# Run the server
python manage.py runserver

For detailed setup instructions, see our Contributing Guide.

We welcome contributions from everyone! Whether you're fixing bugs, adding features, improving documentation, or spreading the word, your help is appreciated.

• 📚 Read our Contributing Guide
• 🐛 Check out open issues
• 💡 Look for issues tagged with good first issue if you're new
• 🎨 Follow our coding standards (Black, isort, ruff)
• ✅ Run pre-commit before submitting changes

• 🌐 Website: owaspblt.org
• 💬 Slack: Join OWASP Slack
• 🐦 Twitter: @OWASP_BLT
• 💰 Sponsor: Support the project
• 📧 Contact: Reach out through GitHub issues

This project is licensed under the AGPL-3.0 License - see the LICENSE.md file for details.

⭐ Star this repository if you find it helpful!
Made with ❤️ by the OWASP BLT Community