All organizations · GSoC 2026 · Security

OWASP Foundation

No more insecure software.

As the world’s largest non-profit organization concerned with software security, OWASP: * Supports the building of impactful projects; * Develops & nurtures communities through events and chapter meetings worldwide; * Provides educational publications & resources in order to enable developers to write better software, and security professionals to make the world's software more secure.

python
javascript
java
ZAP
Juice Shop

web
cloud
application security
cybersecurity
DevSecOps

Project ideas

5 ideas on its 2026 ideas page. 46 mentors named.

Bug Logging Tool (BLT)
OWASP DevSecOps Maturity Model
OWASP Juice Shop
OWASP Web Application Honeypot Project
OWASP GenAI Security Project : FinBot CTF (Agentic AI Security “Juice Shop”)

Read the ideas page. Ideas are for scope reference; never copy one into a proposal.

History

In GSoC since 2016, 10 years. Projects per year: '16: 5, '18: 8, '19: 12, '20: 12, '21: 14, '22: 15, '23: 11, '24: 10, '25: 12, '26: 26.

On GitHub

99 repositories pushed to in the last year. Main languages: HTML (29), Python (24), TypeScript (5), Java (4), JavaScript (4), CSS (2).

Links and channels

Website: https://owasp.org
Ideas page: https://owasp.org/www-community/initiatives/gsoc/gsoc2026ideas
Source code: https://github.com/owasp
Email: gsoc-admins@owasp.org
Chat: https://owasp.org/slack/invite
Mailing list: https://groups.google.com/g/owasp-gsoc?pli=1

go deeper in your terminal

git-into-gsoc org "OWASP Foundation" --shortlist
git-into-gsoc repos "OWASP Foundation"
git-into-gsoc issues --org "OWASP Foundation"

or ask your assistant:
"Which OWASP Foundation repositories merge
newcomers' pull requests, and which beginner
issues are still free?"

Those commands read live data: which repositories merge outside pull requests, and which beginner issues nobody has claimed. Install in two minutes.