A deliberately insecure Java web application

A basic tool to check security headers of a website

Copies mitigations from one Veracode profile to another if it's the same flaw based on the following flaw attributes: issueid, cweid, type, sourcefile, and line. The script will copy all proposed a…

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security teste…

Command line app that mitigates flaws in Veracode based on CWE, scan type, and specific text in the description.

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

Identify Veracode application profiles with one or more static scans in an incomplete state.

Apache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code

Vulnerable Python Application To Learn Secure Development

Simple Python demo app for Veracode scans.

Import flaws from Veracode Pipeline and Policy/Sandbox scans to GitHub Issues

A deliberately vulnerable web application for learning web application security.

Official iOS app for Mastodon

A private messenger for iOS.

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…