OWASP ServerlessGoat
A serverless application that demonstrates common serverless security flaws and weaknesses
A serverless application that demonstrates common serverless security flaws and weaknesses
Checked October 2026.
This serverless application demonstrates common serverless security flaws as described in the Serverless Security Top 10 Weaknesses guide.
Teach developers & security practitioners about common serverless application layer risks and weaknesses.
Educate on how serverless application layer weaknesses can be exploited.
Teach developers & security practitioners about serverless security best-practices.
You can find more information about WebGoat at: https://www.owasp.org/index.php/OWASP_Serverless_Goat
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about OWASP ServerlessGoat: features, pricing and alternatives.
OWASP ServerlessGoat is a product in the Secure Code Training category. It covers Serverless.
OWASP ServerlessGoat is free. Download and setup instructions are at https://github.com/OWASP/Serverless-Goat/.
Alternatives to OWASP ServerlessGoat listed on CybersecTools:
Compare all OWASP ServerlessGoat alternatives at https://cybersectools.com/alternatives/owasp-serverlessgoat
OWASP ServerlessGoat is available as a cloud service. It is listed for startups, small businesses and mid-market companies. It is free.
Side by side: features, pricing model and the company behind each one.
AppSec training platform for software developers to learn secure coding
Node.js Goof is a vulnerable Node.js demo application containing multiple security vulnerabilities for testing and educational purposes.
NodeGoat provides an environment to learn and address OWASP Top 10 security risks in Node.js web applications.
OWASP WrongSecrets is an educational game that teaches proper secrets management by demonstrating common mistakes through interactive challenges across various deployment platforms.
Online platform for web app security training via hands-on labs and code review
Security training certification for developers to identify & fix vulnerabilities
On our shortlist?
No shortlist covers this product's category yet. The closest is Best Application Security Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
