The primary source document is a Word document. However, pre-printed card decks may be more useful, or there are links to the source design files for the cards themselves (see links underneath). You can also choose to play the OWASP Cornucopia Website App Edition, Mobile App Edition and Companion Edition online at copi.owasp.org
OWASP no longer has a stock of printed decks. OWASP does not endorse or recommend commercial products or services. However, Cybersec Games offers large print (v3.0) web app decks and large print (v2.0) mobile app decks. There is also a Companion edition, sold alongside the Website App v3.0 Edition as the 25th Anniversary edition, that complements the other decks with scenarios for DevOps, LLM, Agentic, frontend, automated threats, and Cloud. Cybersec Games also offers a croupier to help you distribute cards to team members.
There are many ways to print copies of the card decks yourself. For instructions on printing your own decks, please go to cornucopia.owasp.org
Source code to generate the Word document, PDFs and InDesign files for printing are maintained in our Github repository.
Project Resources
Project Information
Slack