About OWASP Top 10 for Maritime Security
This project aims to develop an OWASP Top 10 list specifically tailored to the maritime industry. Currently, maritime cybersecurity lacks well-defined standards, and this project leverages the OWASP framework to address this gap.
The project will identify the ten most critical security vulnerabilities facing the maritime sector:
This will provide a foundational framework for risk management and vulnerability mitigation, ultimately strengthening maritime cybersecurity.
Data Collection and Analysis: Gather maritime vulnerability data, clean and analyze it, identify key vulnerabilities and emerging threats.
OWASP Top 10 for Maritime Development: Prioritize vulnerabilities, develop detailed descriptions for each in the Top 10 list, and finalize the report.
Deliverables and Outreach: Finalize all project deliverables, prepare for dissemination of results (presentations, communication strategy), and raise awareness of the OWASP Top 10 for Maritime list.
We invite maritime security experts, researchers, and industry practitioners to contribute to this project. Your expertise is invaluable in identifying and addressing the most critical security challenges facing the maritime industry.
We’ve begun the first phase of our project: gathering data on maritime security vulnerabilities. We’re inviting everyone to contribute publicly available information to our project. You can upload your data to the public section of our data collection area.
If you have data that includes sensitive information but can be shared publicly after removing private details, please upload it to the private section. We’ll review this data to determine if it can be made public.
https://github.com/OWASP/www-project-top-10-for-maritime-security/blob/master/CONTRIBUTING.md
The OWASP Top 10 for Maritime Security Project documents are free to use!
The OWASP Top 10 for Maritime Security Project is licensed under the Creative Commons Attribution-ShareAlike 4.0 license, so you can copy, distribute, and transmit the work. You can also adapt it, and use it commercially, as long as you attribute the work. If you alter,transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.
Project Resources
Project Leaders
Faiz Ahmed Zaidi
Project Information
Incubator Project
Classification
Other
Language
Python
Contributors
6
GitHub Stars
3
Downloads
0
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.