Open source
OWASP Cheat Sheet Series
Short security guides for developers, one topic per sheet
Security LearningConcise security cheat sheets
Alternatives to OWASP Juice Shop
12 tools like OWASP Juice Shop, chosen by what they do. About OWASP Juice Shop
Free
OWASP Foundation
Nonprofit hub for free application security projects and standards
Security LearningOpen web security community
Free
Web Security Academy
Free online web security training with interactive labs
Security LearningFree web security training
Curated
Hack The Box
Hands-on cyber labs, challenges and training for teams and learners
Security LearningHands on hacking labs
Freemium
TryHackMe
Browser-based hands-on cyber security labs and guided paths
Security LearningGuided cyber security rooms
Open source
OWASP Coraza
Go-based open source web application firewall with CRS support
Network DefenseGo web application firewall
Open source
Zed Attack Proxy (ZAP)
Free open source scanner for finding security flaws in web apps
Web SecurityFree web app scanner
Curated
Veracode
Platform for finding and fixing application security risks
Code SecurityApplication security platform
Open source
OSV-Scanner
Finds known vulnerabilities in your project's dependencies
Code SecurityGoogle open source scanner
Open source
ModSecurity
Open source web application firewall engine used with OWASP rules
Network DefenseOpen source WAF engine
Curated
Checkmarx
Enterprise platform that scans code for security flaws and risks
Code SecurityEnterprise code security
Freemium
Snyk
Finds security risks in AI-written code, agents and apps
Code SecurityFind and fix vulnerabilities