Web Security Training Open Source Projects
Discover 2 open source Web Security Training repositories from GitHub, each with an analysis of what it does, key features, use cases and alternatives. Web Security Training projects here are most often combined with Education, Security and Web App. Last updated October 24, 2026.
juice-shop: Practice Web Application Security with OWASP
OWASP Juice Shop is a deliberately insecure web application built with TypeScript for security training, awareness demos, CTFs, and security-tool testing. Its challenges cover the OWASP Top Ten and other real-world application flaws.
ActiveHealth 62/100
DVWA: Practice Web Application Security in a PHP/MariaDB Lab
DVWA is a deliberately vulnerable PHP/MariaDB web application for security professionals, developers, students, and teachers to practice common web vulnerabilities. Its difficulty levels and Docker setup make it useful for controlled training, not public deployment.
ActiveHealth 55/100