OWASP ASST

OWASP CLI tool that scans PHP/MySQL source code against the OWASP Top 10 and reports vulnerabilities.

Desktopfree

OWASP ASST (Automated Software Security Toolkit) is an open-source, source-code scanning CLI tool that checks PHP and MySQL projects line by line against the OWASP Top 10 and generates an HTML report, linked to PDF explanations, for each vulnerability found. It is built for developers and security auditors who want an automated first pass on a PHP codebase before deeper manual review.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of OWASP ASST - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim OWASP ASST to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether OWASP ASST (or something else) actually fits.

Try a problem