Free
Free
OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases
- Access
- OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases
OWASP WebGoat Project docker image
● Identity checkedCode · Vendor site 2026-10-04
OWASP WebGoat is a deliberately insecure Java-based web application for learning and testing web application security in a legal lab environment. The OWASP project page documents WebGoat lessons, a companion WebWolf tool, Docker releases, and warnings to run it only on localhost during training.
- Category
- Code
- Free access
- OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases
- API access
- Not confirmed
Is OWASP WebGoat Project docker image right for you?
A good fit for
Developers and security professionals practicing exploitation and remediation on a known-vulnerable Java web stack.
Before you choose
Project warnings note the app is extremely vulnerable and should stay disconnected from untrusted networks during use.
Java security lab
OWASP WebGoat provides intentionally vulnerable Java web lessons so learners can practice attacks safely in authorized environments.
What it can do
Features & capabilities
Unknown is different from unavailable. Each fact carries its own evidence.
| Capability | Value | Evidence | Checked |
|---|---|---|---|
| Interactive lessons | Project goal is an interactive teaching environment for web application security concepts. | Facts sourced | 2026-10-04 |
| Docker distribution | Resources list DockerHub releases alongside GitHub sources for lab deployments. | Facts sourced | 2026-10-04 |
Understand the total cost
OWASP WebGoat Project docker image pricing & plans
Alternatives to OWASP WebGoat Project docker image
View all ↗
BigDevSoonBigDevSoon teaches frontend development by building 21+ real-world projects with AI code generation, instant feedback, 100 daily challenges, and 40+ practice problems. Paid tiers add BigTokens for prototypes, CV tools, and AI project roasting with optional lifetime access.
Explore toolBolt.new
Bolt.new is a browser-based AI app builder where users describe a web or mobile app in chat and get a running project with hosting, databases and custom domains on paid tiers.
Explore tool
AmptThe site emphasizes rapid full-stack workflows, built-in CI/CD, preview environments, and pay-as-you-go tiers for solo developers through enterprise self-hosting.
Explore toolThe practical questions
Frequently asked questions
What is OWASP WebGoat Project docker image used for?
OWASP WebGoat is a deliberately insecure Java-based web application for learning and testing web application security in a legal lab environment. The OWASP project page documents WebGoat lessons, a companion WebWolf tool, Docker releases, and warnings to run it only on localhost during training.
Does OWASP WebGoat Project docker image have a free plan?
OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases. This record lists ongoing free access; check the plan limits before starting.
How much does OWASP WebGoat Project docker image cost?
No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.
Can I use OWASP WebGoat Project docker image through an API?
Not confirmed. API access and subscription access may have different terms; consult the linked sources.
What should I check before choosing it?
Project warnings note the app is extremely vulnerable and should stay disconnected from untrusted networks during use.
Price history
No retained pricing changes yet. A current price alone does not establish a historical trend.
How this profile is supported
Identity and profile
Reviewed vendor source
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.