Explore the world
of cyber security

Driven by volunteers, OWASP resources are accessible for everyone.

Corporate Supporter Spotlight: Interview with John Amaral, CTO and Co-Founder of root.io

This month, we are featuring root.io, a Platinum Corporate Supporter of OWASP, which specializes in automated container remediation. In this interview, we discuss the origins of root.io, root's use of OWASP materials and our impact on their operations, how they use software bill of materials with OWASP CycloneDX, and how you can get your project startup idea off the ground and some advice for future OWASP project entrepreneurs.

A huge thank you to all our Corporate Supporters! We will be featuring more corporate supporter stories in the coming months, so stay tuned!

OWASP x Google Summer of Code 2025 - Enabling 15 opportunities for impact

image

Starr Brown, May 12, 2025

We’re proud to share that OWASP is once again an official mentoring organization for Google Summer of Code (GSoC) 2025—and this year, we’ve secured 15 contributor slots across some of the most impactful open-source security projects in the world.

This milestone reinforces OWASP’s ongoing commitment to open-source innovation and highlights the strength of our global community of mentors and contributors, as well as our commitment to education-by-doing with the GSoC program.

🔧 GSoC 2025: What’s on Deck?

Contributors will get hands-on experience improving and expanding some of OWASP’s most vital tools:

  • Juice Shop – A globally-used, intentionally insecure web app for security training.
  • Nettacker – A fast, automated network scanner built for vulnerability detection.
  • Offensive Web Testing Framework (OWTF) – A smart framework for streamlined penetration testing.
  • Bug Logging Tool (BLT) – A next-gen bug tracker focused on gamification to incentivize bug and security reporting.
  • Nest – Core infrastructure to power and enable the OWASP projects and contributors ecosystem.
  • PyGoat – A Python-based sandbox for learning and exposing security flaws in modern stacks.
  • OpenCRE – A collaborative cybersecurity knowledge base & reference system.

🚀 What’s Next?

Selected contributors will begin collaborating with mentors to level up these tools and help push open-source security forward.

🙌 Thank You

Huge thanks to our project leads, mentors, contributors, and the OWASP community who made this year’s GSoC application a success. Let’s make this summer one to remember!

— Starr Brown & Fabio Cerullo, OWASP GSoC Admins

...read more

Upcoming at OWASP

Quick access to our highlighted
flagship resources
See all flagship resources(15)
Documentation
Top Ten
The reference standard for the most critical web application security risks
→
Documentation
ASVS
Application security verification standard
→
Documentation
Cheat Sheets
List of crucial app security information
→
Have an idea for a project?
Take advantage of our resources and
let it grow with OWASP.
Start a project

Recent OWASP News & Opinions

Upcoming Conferences