Open source
OWASP Cheat Sheet Series
Short security guides for developers, one topic per sheet
Security LearningConcise security cheat sheets
Alternatives to OWASP Foundation
12 tools like OWASP Foundation, chosen by what they do. About OWASP Foundation
Open source
OWASP Juice Shop
Deliberately insecure web app for security training and CTFs
Security LearningDeliberately insecure web app
Free
Web Security Academy
Free online web security training with interactive labs
Security LearningFree web security training
Freemium
TryHackMe
Browser-based hands-on cyber security labs and guided paths
Security LearningGuided cyber security rooms
Curated
Hack The Box
Hands-on cyber labs, challenges and training for teams and learners
Security LearningHands on hacking labs
Open source
Zed Attack Proxy (ZAP)
Free open source scanner for finding security flaws in web apps
Web SecurityFree web app scanner
Curated
Veracode
Platform for finding and fixing application security risks
Code SecurityApplication security platform
Open source
OWASP Coraza
Go-based open source web application firewall with CRS support
Network DefenseGo web application firewall
Freemium
Snyk
Finds security risks in AI-written code, agents and apps
Code SecurityFind and fix vulnerabilities
Curated
Checkmarx
Enterprise platform that scans code for security flaws and risks
Code SecurityEnterprise code security
Open source
ModSecurity
Open source web application firewall engine used with OWASP rules
Network DefenseOpen source WAF engine
Curated
Wiz
Cloud and AI security platform linking code, cloud and runtime
Cloud SecurityCloud security platform