Data / Repositories / Owasp
Owasp repositories on GitHub: 8 ranked by stars
8 public repositories tagged Owasp are on GitHub, with 20,399 stars between them; 4 had a push in the last 30 days. Most are written in Python (1), C (1), Astro (1). The most starred: infoslack/awesome-web-hacking (7,289), microsoft/agent-governance-toolkit (6,427), lirantal/awesome-nodejs-security (3,047).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| infoslack/awesome-web-hacking | A list of web application security | 7,289 | 1,363 | MIT | Sep 18 | Oct 11 | |
| microsoft/agent-governance-toolkit | AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top… | Python | 6,427 | 1,133 | MIT | Oct 13 | Oct 14 |
| lirantal/awesome-nodejs-security | Awesome Node.js Security resources | 3,047 | 317 | Aug 14 | Oct 14 | ||
| cossacklabs/themis | Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms. | C | 1,978 | 159 | Apache-2.0 | Apr 24 | Oct 11 |
| Zeyad-Azima/Offensive-Resources | A Huge Learning Resources with Labs For Offensive Security Players | 1,174 | 246 | Dec 9, 2025 | Oct 11 | ||
| RiccardoBiosas/awesome-MLSecOps | A curated list of MLSecOps tools and resources for securing machine learning and AI systems - adversarial ML defense, LLM security, AI red teaming, model scanning, supply-chain… | Astro | 477 | 121 | MIT | Oct 12 | Oct 14 |
| subodhkc/mcp-tenant-isolation | Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server… | TypeScript | 4 | 2 | MIT | Oct 8 | Oct 14 |
| abbyshade111/StackVet | Turns plain-language answers into a hardened Node/Express web app, then checks it against OWASP ASVS 5.0, AISVS 1.0 and Secure by Design — and reports honestly on what it could… | Rust | 3 | 0 | MIT | Oct 14 | Oct 14 |
Related topics
- Security 6
- Web security 3
- Hacking 2
- AI agents 2
- Python 2
- Cybersecurity 2
- AI security 2
- Penetration testing 1
- Pentesting 1
- Agent framework 1
- Compliance 1
- Microsoft 1
Read from GitHub by SpecStream between October 11, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.