Top APPSEC GitHub Repositories & Tools (2026)

The ZAP by Checkmarx Core project

An OOB interaction gathering server and client library

ZAP Add-ons

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.