asvs

A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0

A small tool to help developers understand a huge set of security requirements from appsec teams

OWASP ASVS Security Evaluation Templates with Nuclei

Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping

OWASP ASVS 5.0 security-audit agent skills for Claude Code — maps every finding to a specific ASVS requirement with code evidence.

Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/

WSTG tells you what to cover. This tells you what the tests inside each line actually are: the procedure, the oracle that separates a real result from the thing that imitates it, and where a success can lead. One offline, self-contained HTML file — no server, no install, no network.

Installable AI-agent skill bundle for OWASP-driven code scanning, fixing, and secure-build supervision. Multi-host (Claude Code, Cursor, Codex, etc). Distilled from the SCCAP platform. Distributed via skills.sh.

Personal Flask to-do app built to production discipline — v2.3.0 (AGPL-3.0, DOI-archived): 114 machine-checked gates, 78 ADRs, 27 recorded governance audits · OpenSSF Silver badge, PR-only main, signed releases with SLSA provenance, ASVS 5.0 L2 assessed, 27 required checks against real services

Boilerplate FastAPI secure-by-default — auth durcie, headers OWASP, RGPD pré-câblé, audit OWASP ASVS L1 publié

This is a parallel repository that covers the need to have a checklist for ASVS inspired by the MASVS checklist.

A python implementation of the decontam R package for ASV filtering.

Codex skill for OWASP ASVS 5.0 security reviews with control-mapped findings.