About OWASP CWE Toolkit
Mission
CWE Toolkit project aims to provide toolset that enables application security engineers to easily manage, manipulate and organize security data based on the CWE dataset.
Why CWE Toolkit?
The CWE Toolkit project addresses a key concern in which CWE data is hard to access programatically and perform various automations around it, such as filtering security vulnerabilities (CVEs) based on their CWE identifier, their relationships or a string matched expression.
The goal of the CWE Toolkit project is to provide code SDKs and general tooling to programmatically manage CWE data based on APIs and Command Line utilities.
Project Roadmap
Following is a proposed project roadmap:
Project Information
Incubator Project
Classification
Incubator
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.