OWASP-Benchmark/BenchmarkJava

BenchmarkJava

✅ Recently maintained

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

839Stars
1,517Forks
+17-day stars

Java · GPL-2.0 · Last push 2026-10-27

Official repository & installation ↗

Star history

2025-09-292026-11-01
View historical data
DateStars
2026-10-03827
2026-10-04827
2026-10-05827
2026-10-06827
2026-10-07828
2026-10-08829
2026-10-09830
2026-10-10831
2026-10-11831
2026-10-12832
2026-10-13833
2026-10-14833
2026-10-15834
2026-10-16834
2026-10-17834
2026-10-18835
2026-10-19836
2026-10-20836
2026-10-21836
2026-10-22836
2026-10-23836
2026-10-24836
2026-10-25838
2026-10-26838
2026-10-27838
2026-10-28838
2026-10-29838
2026-10-30838
2026-10-31839
2026-11-01839

Get the project

git clone https://github.com/OWASP-Benchmark/BenchmarkJava.git

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.