OWASP® Foundation

We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10

[OWASP® Foundation @owasp]

📚 Meet the author at Global AppSec USA!📚

Join Harriet Farlow for a book signing of Practical AI Security on Thursday, November 5, from 3:00–3:30 PM.

Pick up a copy, and you’ll also get a voucher for a FREE e-book version!

Come say hi, grab a signed copy, and level up your AI security knowledge!

Learn more: https://t.co/iRFIGHoiSD

#OWASPSanFran26 #AISecurity #AppSec

[OWASP_BLT @OWASP_BLT]

🚀 When GitHub went dark, OWASP BLT kept building. 🐝

45K+ commits. 260+ contributors. One self-hosted forge.

A story of open-source resilience. 💪

https://t.co/HdwVFcqd1E

[Björn Kimminich @bkimminich]

🚨 Registrations for my @owasp_juiceshop workshop on Oct 24th for @owasp_chennai are now closed! Reaching 650 sign-ups for a 250-seat event is truly 🤯! அற்புதம்! Looking forward to hacking with you all! 🧃😎💻

[OWASP® Foundation @owasp]

🗳️ OWASP Board Election voting is open!

OWASP members, it’s time to make your voice heard! With three Board seats up for election, your vote helps shape the future of our community.

📩 Keep an eye on your inbox for your unique ballot (check both personal and OWASP emails!).

⏰ Voting closes October 30 at midnight UTC.

Learn more: https://t.co/CbmVtl4lAC

#community #opensource #boardelections #appsec

[OWASP® Foundation @owasp]

Check out this free video to give you a taster of what you can expect from Dawid Czagan's full-stack pentesting laboratory training in San Francisco this November🎉

https://t.co/p7JkULfljV

📺 Token Hijacking via PDF File - Video Tutorial https://t.co/IZ6rPNo2ol

[OWASP Helsinki @OWASPHelsinki]

OWASP Helsinki Chapter is heading to Disobey! 🚀

In February, we will be joining the Disobey Community Village. More details coming as we get closer! 👀

See you at Disobey! 👋

#OWASP #OWASPHelsinki #Disobey #CyberSecurity #AppSec #ApplicationSecurity #InfoSec #Helsinki

[OWASP® Foundation @owasp]

Ready to level up your threat modeling skills?

Join Sebastien Deleersnyder for 2 days of hands-on exercises, real-world attack scenarios, and AI-assisted threat modeling. Learn by doing, tackle modern threats, and take practical skills back to your team! 🤖

📅 Nov 3–4
🎟️ https://t.co/vTXIuyU8i9

#OWASPSanFran26 #AppSec #GlobalAppSec26 #threatmodeling #AI

[OWASP® Foundation @owasp]

Jeremiah Grossman, Co-Founder and CEO, Root Evidence, will be joining us in San Francisco! 🎉

❓ Is your security program actually delivering results ❓

For years, security decisions have been driven by predictions and assumptions. Now, real-world data from insurers, claims adjusters, and incident responders is revealing which vulnerabilities are actually exploited, which controls prevent incidents, and where security spending may not deliver value.

🎤 Join this talk to explore what this evidence means for the future of security and learn how to measure outcomes, make more informed investment decisions, and demonstrate what’s really working.

https://t.co/6szZBHVrw1

#OWASPSanFran26 #GlobalAppSec #keynote #opensource #conference

[OWASP® Foundation @owasp]

🗳️ OWASP Board Election voting is open!

OWASP members, it’s time to make your voice heard! With three Board seats up for election, your vote helps shape the future of our community.

📩 Keep an eye on your inbox for your unique ballot (check both personal and OWASP emails!).

⏰ Voting closes October 30 at midnight UTC.

Learn more: https://t.co/CbmVtl4lAC

#community #opensource #boardelections #appsec

[OWASP® Foundation @owasp]

🤖 AI coding assistants can write code fast. But can you trust the code they produce?

Join Jim Manico for a hands-on workshop on using Claude Code and Codex securely, from setting up safer environments to building security into your AI-assisted development workflow.

Wanna know more? Watch this short video to hear from the man himself on what to expect!

Bring your laptop and get ready to build, test, review, and secure real code.
https://t.co/5fzt3shoh3

#OWASPSanFran26 #GlobalAppSec26 #AI #AppSec #SecureCoding

[OWASP® Foundation @owasp]

🔥Introducing OWASP Projects Hot Takes!

It’s Cybersecurity Awareness Month, and throughout October, we’ll be sharing top tips from our OWASP project teams to help you build more secure software. 👀

🔥 First up: Network Security, from OWASP CRS!

Your perimeter firewall lets HTTP traffic through by design. That’s where attacks can get in.

OWASP CRS provides a free, community-maintained set of rules for WAFs like ModSecurity and Coraza, helping block common attack patterns covered by the OWASP Top 10 at the edge of your network.

#OWASP #CybersecurityAwarenessMonth #AppSec #NetworkSecurity

[OWASP® Foundation @owasp]

🗳️ OWASP Board Election voting is open!

OWASP members, it’s time to make your voice heard! With three Board seats up for election, your vote helps shape the future of our community.

📩 Keep an eye on your inbox for your unique ballot (check both personal and OWASP emails!).

⏰ Voting closes October 30 at midnight UTC.

Learn more: https://t.co/CbmVtl4lAC

#community #opensource #boardelections #appsec

[OWASP® Foundation @owasp]

OWASP Webshield Library (OWL) v2.0.0 is live: Open source frontend toolkit with controls mapped to every OWASP Top 10 category for JavaScript applications - across React JS, Vue JS, Next JS, Node JS, and Express JS

🧪 Benchmarked against OWASP NodeGoat and OWASP Juice Shop - Reference vulnerable applications from the OWASP open-source community.

📊 Results published :
NodeGoat: 10 of 22 weaknesses fully blocked, 5 partially.
Juice Shop: 23 of 70 relevant challenges fully blocked, 17 partially.

Every gap in the coverage matrix is now on the roadmap. Review it, challenge it, or help close the next gap.

🔗 Repo: https://t.co/fNaPZxxTtm

📘 A Docs: https://t.co/ReH3R1bsoY

#OWASP #AppSec #JavaScript #OpenSource #JuiceShop #NodeGoat

[OWASP® Foundation @owasp]

Do checkout MCP Security Testing Guide

[Vandana Verma @InfosecVandana]

What would you test first in an MCP-powered app?

Help review the OWASP MCP Security Testing Guide.

Pick one section. Flag a gap. Suggest a fix.

Practical tests, clearer examples, missing attack scenarios—all welcome.

https://t.co/0TpiRHFK0u @owasp

[OWASP® Foundation @owasp]

AI is speeding up code production. Can your security scanning keep up?

Join Avi Douglen for 2-Day Training: Repeatable, Scalable and Valuable Code Security Scanning at #GlobalAppSec USA! 🔐

📅 November 3–4

💡 Discover how to combine AI-driven analysis and traditional scanning techniques to secure code at scale.

🎟️ Book your training ticket: https://t.co/oHEHkErees

#OWASPSanFran26 #AppSec #AI #SecureCoding

[OWASP® Foundation @owasp]

🗳️ OWASP Board Election voting is open!

OWASP members, it’s time to make your voice heard! With three Board seats up for election, your vote helps shape the future of our community.

📩 Keep an eye on your inbox for your unique ballot (check both personal and OWASP emails!).

⏰ Voting closes October 30 at midnight UTC.

Learn more: https://t.co/CbmVtl4lAC

#community #opensource #boardelections #appsec

[InfoSecMap @InfoSecMap]

¡Qué locura de viernes en #BuenosAires! 🎉

300+ personas y 20+ partners compartiendo la misma pasión por #InfoSec.

Nuestros co-hosts: @ComunidadDOJO, @OWASPBA, @LaVillaHacker, @8dot8, @OWASP_UY, @KavaConPy, @Defcon506, @BlackAlpaca_org, @BSides_CO, @Lockdown0x0 ++

¡Gracias! 💜

[OWASP® Foundation @owasp]

We’re pleased to welcome @OrcaRouter as an OWASP Supporter!

OrcaRouter builds secure AI infrastructure focused on AI security, privacy, and cyber defense. Its platform includes agent firewalls, data cloaking, BYOK, zero-data-retention workflows, post-quantum encrypted logging, and regional data controls.

OrcaRouter also develops specialized cyber AI models, including OrcaCyber Zero, for security research, defensive testing, vulnerability analysis, and authorized cyber operations.

We’re excited to have OrcaRouter supporting the OWASP community and advancing practical security for AI. - https://t.co/Prk497V40R

#corporatesupporter #thankyou #appsec #opensource #community #AI

[OWASP® Foundation @owasp]

Ready to level up your threat modeling skills?

Join Sebastien Deleersnyder for 2 days of hands-on exercises, real-world attack scenarios, and AI-assisted threat modeling. Learn by doing, tackle modern threats, and take practical skills back to your team! 🤖

📅 Nov 3–4
🎟️ https://t.co/i67Hg0OmW2

#OWASPSanFran26 #AppSec #GlobalAppSec26 #threatmodeling #AI

[OWASP® Foundation @owasp]

🗳️ OWASP Board elections are coming up!

Want to know more about the candidates and their vision for OWASP’s future? 👀

If you missed our Candidate Town Hall, don’t worry! You can now catch up and watch the full session here: 👇

🔗 https://t.co/JwOb1sEe48

Get informed, hear from the candidates, and make your voice count! 🙌

#OWASP #OpenSource #Community