OWASP Vulnerable Web Applications Directory

OWASP Vulnerable Web Applications Directory - An OWASP Production project

About OWASP Vulnerable Web Applications Directory

A comprehensive registry of known vulnerable web and mobile applications for legal security testing and training.

Goto the Directory

Project Resources

Project Leaders

Rick Mitchell

Rick Mitchell

Project Co-Lead

Email

Simon Bennetts

Simon Bennetts

Project Co-Lead

Email

Raul Siles

Project Co-Lead

Email

Project Information

Production Project
Classification
Documentation
OWASP Logo
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.