Web Security Testing Guide
The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.
Any contributions to the guide itself should be made via the guide’s project repo. Contributions should only be made in the proper repo against the latest content. Please don’t open PRs for versioned or stable content, they represent point-in-time state.
We are currently developing release version 5.0. You can read the latest development documents in our official GitHub repository or view the bleeding-edge content at latest.
v4.2 is currently available as a web-hosted release and PDF. Previous releases are available as PDFs and in some cases web content via the Release Versions tab.
Project Resources
Project Information
Flagship Project
Classification
Documentation
Language
CSS
License
Creative Commons Attribution Share Alike 4.0 International
Latest Version
4.2
Contributors
189
GitHub Stars
10107
Downloads
256421
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.