About OWASP Scan IT
High Level Description
Scan IT is an application and source code manifest and associated tools to orchestrate and simplify important phases of the security scanning lifeCycle management of Applications.
The manifest: That describes important pieces of information that are normally required by most SAST and/or DAST tools to scan your code or application for potential vulnerabilities.
The Tools: To both facilitate the generation of the manifest and automate consumption and onboard of your apps into your commercial or open source scanning tools.
Project Resources
Project Information
Incubator Project
Classification
Incubator
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.