About OWASP SecurityRAT
Simplify security requirement management during development using automation approaches.
The core functionality of SecurityRAT (“Security Requirement Automation Tool”) can be described in the following steps:
Focus of SecurityRAT is put on automation rather then the requirements. While we offer ASVS as an initial set of requirements which you can start with, we strongly recommended to create your own set of requirements which fits your company risk profile.
You can try out SecurityRAT at https://securityrat.org
Username: demo
Pasword: SecurityRATdemo10!
You can also play around with changing the requirements, the database is reset every 24 hours.
Project Resources
Project Leaders
René Reuter
Project Leader
Daniel Kefer
Project Leader
Project Information
Incubator Project
Classification
Other
Language
JavaScript
Contributors
18
GitHub Stars
191
Downloads
1686
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.