Repolode
Submit
OWASP

OWASP/CheatSheetSeries

A collection of concise, topic-specific OWASP guides offering practical good security practices for developers building applications.

View on GitHubWebsite
Stars
33,691
Forks
4,688
Open issues
27
Last commit
4 hours ago

What is it?

The OWASP Cheat Sheet Series is a set of short reference guides covering specific application security topics. Each sheet focuses on one area and gives builders concrete good practices for securing their applications, so developers can look up a specific risk without reading a full standard.

The content is maintained as Markdown source files and published as an offline-capable website, which can be built locally with make commands, Docker, or Podman. The repository also includes linting scripts for Markdown and terminology, and a downloadable ZIP bundle of the site is available.

The project is an OWASP flagship effort, with contributions from volunteers who fix errors, address issues, and propose new sheets through its contribution guide.

Key features

  • 01Concise cheat sheets, each covering one application security topic.
  • 02Published as a searchable website with an offline ZIP bundle.
  • 03Local build via make, Docker, or Podman.
  • 04Markdown and terminology linting scripts for contributors.
  • 05Open contribution process through issues and pull requests.

Use cases

  • Looking up secure implementation guidance for a specific topic like authentication or input validation.
  • Giving developers a quick security reference during code review or design.
  • Hosting an offline copy of the security guides for teams with restricted internet access.
  • Contributing fixes or new security guidance to an open-source OWASP project.

Quick start

  1. 1

    Build the site locally

    make generate-site
  2. 2

    Serve the site on port 8000

    make serve

Things to know

  • Content is licensed CC BY-SA 4.0, so derivative works must use the same license.

Topics

#application-security#owasp#security-best-practices#cheatsheets#web-security#appsec#best-practices#code#security

FAQ

What is CheatSheetSeries?
A collection of concise, topic-specific OWASP guides offering practical good security practices for developers building applications. The OWASP Cheat Sheet Series is a set of short reference guides covering specific application security topics. Each sheet focuses on one area and gives builders concrete good practices for securing their applications, so developers can look up a specific risk without reading a full standard.
Is CheatSheetSeries free to use? What license does it have?
CheatSheetSeries is open source under the CC-BY-SA-4.0 license. Check the license terms before using it in commercial products.
Is CheatSheetSeries still maintained?
Actively maintained. The last commit to CheatSheetSeries was on Oct 21, 2026.
What can I use CheatSheetSeries for?
Looking up secure implementation guidance for a specific topic like authentication or input validation. Giving developers a quick security reference during code review or design. Hosting an offline copy of the security guides for teams with restricted internet access. Contributing fixes or new security guidance to an open-source OWASP project.
How do I install CheatSheetSeries?
Build the site locally: make generate-site Serve the site on port 8000: make serve
Where can I get CheatSheetSeries?
The source code and installation instructions are on GitHub: https://github.com/OWASP/CheatSheetSeries

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects