Free
Free
Project page distributes Security Shepherd under the GNU GPL v3 with free OWASP resources
- Access
- Project page distributes Security Shepherd under the GNU GPL v3 with free OWASP resources
OWASP Security Shepherd
● Identity checkedCode · Vendor site 2026-10-04
OWASP Security Shepherd is a web and mobile application security training platform with guided lessons and challenge modules. It teaches manual penetration testing skills across OWASP Top Ten style risks, includes configurable modules for classrooms or CTFs, and ships as open-source Java software.
- Category
- Code
- Free access
- Project page distributes Security Shepherd under the GNU GPL v3 with free OWASP resources
- API access
- Not confirmed
Is OWASP Security Shepherd right for you?
A good fit for
Educators and AppSec programs building progressive web and mobile security labs for varied skill levels.
Before you choose
Self-hosted deployments require operators to manage Java infrastructure and module configuration for their learners.
AppSec training platform
Security Shepherd combines instructional lessons and scored challenges to sharpen manual web and mobile testing skills.
What it can do
Features & capabilities
Unknown is different from unavailable. Each fact carries its own evidence.
| Capability | Value | Evidence | Checked |
|---|---|---|---|
| Lesson plus challenge flow | Description explains lessons teach a concept then challenges let users exploit hardened real vulnerabilities. | Facts sourced | 2026-10-04 |
| Configurable modules | Copy notes administrators can tune which security topics and modules learners see. | Facts sourced | 2026-10-04 |
Understand the total cost
OWASP Security Shepherd pricing & plans
Alternatives to OWASP Security Shepherd
View all ↗
ThunkableThunkable is a no-code platform for building native iOS and Android apps with AI-assisted design and logic. Public pricing lists free exploration tiers plus paid Builder plans with AI tokens, private projects, live publishing, and support levels for founders, agencies, and education teams.
Explore tool
AppetizeAppetize.io streams Android emulators and iOS simulators in the browser for demos, support, testing, and Playwright-based mobile automation. Teams launch cloud devices without maintaining local device labs.
Explore tool
BigDevSoonBigDevSoon teaches frontend development by building 21+ real-world projects with AI code generation, instant feedback, 100 daily challenges, and 40+ practice problems. Paid tiers add BigTokens for prototypes, CV tools, and AI project roasting with optional lifetime access.
Explore toolThe practical questions
Frequently asked questions
What is OWASP Security Shepherd used for?
OWASP Security Shepherd is a web and mobile application security training platform with guided lessons and challenge modules. It teaches manual penetration testing skills across OWASP Top Ten style risks, includes configurable modules for classrooms or CTFs, and ships as open-source Java software.
Does OWASP Security Shepherd have a free plan?
Project page distributes Security Shepherd under the GNU GPL v3 with free OWASP resources. This record lists ongoing free access; check the plan limits before starting.
How much does OWASP Security Shepherd cost?
No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.
Can I use OWASP Security Shepherd through an API?
Not confirmed. API access and subscription access may have different terms; consult the linked sources.
What should I check before choosing it?
Self-hosted deployments require operators to manage Java infrastructure and module configuration for their learners.
Price history
No retained pricing changes yet. A current price alone does not establish a historical trend.
How this profile is supported
Identity and profile
Reviewed vendor source
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.