Free
Free
OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases
- Access
- OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases
Code · Vendor site 2026-10-04
OWASP WebGoat is a deliberately insecure Java-based web application for learning and testing web application security in a legal lab environment. The OWASP project page documents WebGoat lessons, a companion WebWolf tool, Docker releases, and warnings to run it only on localhost during training.
Understand the total cost
Free
Free
OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases
No retained pricing changes yet. A current price alone does not establish a historical trend.
Reviewed vendor source
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.
Yes. OWASP WebGoat Project docker image has an ongoing free plan. OWASP hosts WebGoat as a free open-source training project with public GitHub and Docker releases
OWASP WebGoat Project docker image is listed as free. No paid plan with a published price was found.
We could not confirm API access for OWASP WebGoat Project docker image.