OWASP Web Security Testing Guide
The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.
We are actively inviting new contributors to help keep the WSTG up to date! You can get started at our official GitHub repository.
To report issues or make suggestions for the WSTG, please use GitHub Issues. For everything else, we’re easy to find on Slack: You can @ us on Twitter @owasp_wstg.
Project Resources
Project Information
Flagship Project
Classification
Documentation
Language
Python
License
Creative Commons Attribution Share Alike 4.0 International
Latest Version
4.2
Contributors
184
GitHub Stars
9950
Downloads
247378
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.