OWASP Cornucopia

OWASP Cornucopia provides card game decks (printable cards, online cards, online game) to assist the whole software development team undertake threat modeling of applications (currently website apps and mobile apps)

About OWASP Cornucopia

Volunteers

Cornucopia is developed, maintained, updated and promoted by a worldwide team of volunteers. The contributors to date have been: Please see cornucuopia.owasp.org for a full list. And please let us know if we have missed anyone.

Project Resources

Project Leaders

Grant Ongers

Project lead

EmailLinkedIn

Johan Sydseter

Project lead

EmailLinkedIn

Project Information

Production Project
Classification
Code
Language
Python
License
Creative Commons Attribution Share Alike 4.0 International
Latest Version
3.5
Contributors
62
GitHub Stars
147
Downloads
15095
Industry Usage
FinanceHealthcareGovernmentITTechnology
Compliance Standards
ASVSMASVSAISVSCCMSAMMDSOMM
Corporate Supporters
OWASP Logo
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
AwardsChaptersCommunityContactCorporate SupportersEventsNewsOWASP CommunityProjectsSecurityStaffOWASP Merch
Legal & Governance
About OWASPBoardBoard EUFinance (all documents)Finance & GovernancePoliciesImpact Report 2025Strategic Plan 2026
Socials
BlueskyGitHubLinkedInMastodonSlackXYouTube
OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.