Pygoat

PyGoat is an intentionally vulnerable web Application Security in Django. Our roadmap builds an intentionally vulnerable web Application in Django. Each vulnerability can be based on the OWASP Top Ten.

About Pygoat

Features

The Vulnerabilities can based on OWASP top ten, Mitre CVE & SANS 25 Top Errors, thank you team

Project Resources

GitHub

Project Leaders

Ade Yoseman

Project Leader

Project Information

Incubator Project

Classification

Incubator

Corporate Supporters

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

Quick Links

Awards Chapters Community Contact Corporate Supporters Events Impact Report 2025 News Projects Staff Strategic Plan 2026 Visit Store

Legal & Governance

About OWASP Board Board EU Finance & Governance Finance (all documents)Legal

Socials

Bluesky GitHub LinkedIn Mastodon Slack X YouTube

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.

Pygoat