OWASP Top 10 Interactive Reference

Interactive reference for OWASP Top 10 vulnerabilities with descriptions, examples, mitigations, and code samples.

Security & Privacy

This tool is being rebuilt

The earlier version did not work as described, so it is switched off until a tested version replaces it at this same address.

Tell us what you need it for

Tools that work today

security.txt Generator One small file that tells finders where to knock.
security.txt Generator Generate a standards-compliant security.txt file (RFC 9116) with contact, encryption, acknowledgments, and policy fields.
CVE Lookup One CVE, every field explained.
Apache Security Config Generator Generate secure Apache .htaccess and httpd.conf snippets for TLS, headers, mod_security, and access control.
Firewall Rule Builder Build firewall rules visually for iptables, nftables, and cloud security groups. Export as commands or JSON configs.
GitHub Actions Security Checker Analyze GitHub Actions workflows for security risks: script injection, unpinned actions, and secret exposure.

Web app by bee2.io

SCOUTb2

Website quality scanner

A Chrome extension that crawls a website and reports the accessibility, performance, and search problems it finds, page by page, with a shareable...

Open SCOUTb2

Mac app by bee2.io

Statement Studio

Bank statements to CSV

Turns a bank or card statement into a clean, categorized spreadsheet on the Mac, with no bank login and nothing uploaded.

More Security & Privacy tools

CVSS Score Calculator Vector strings scored exactly by the spec.
OpenPGP Key Lookup Every field read from the key itself.
CVE Lookup One CVE, every field explained.
Breached Password Check Only five characters of a hash ever leave.
VPN Leak Check What a website really sees behind your VPN.
Password Generator Random done right, with the maths shown.

What is it about?

What's missing Something isn't working Could be better Another tool I need Other

Your message (required)

0 / 2000 characters, at least 10

Name (optional)

Email (optional, for a reply)

Leave this field empty

Sent with your message: the address of this page, b2kit.com/tools/owasp-top-10-explorer/

Pressing Send gives your message and this page's address to bee2.io, the team behind b2KIT. Your name and email go along only if you enter them, and any reply goes to that email. How we handle feedback

Sent. Thank you.

This tool is being rebuilt

Help improve this tool Tell us what is missing, broken or worth adding. One minute.