Sunday, October 25, 2026 4,350 lists 78,100 records on file
List your app or device

  1. Home
  2. Penetration Testing Software
  3. OWASP Security-C4PO

OWASP Security-C4PO

Plans and prices

Security-C4PO

Free

Open source · Apache-2.0 license

Every plan, in full

On the record

Components
The documented Docker setup includes Keycloak, MongoDB, Angular, API, and reporting services.owasp.github.io · read 9 Oct 2026
Deployment
The project provides Docker images and a script that pulls and starts the services from Docker Hub.owasp.github.io · read 9 Oct 2026
Development requirements
The local development requirements listed are Docker or Docker Compose, OpenJDK 11, and Node 14.15.1 with npm 6.14.8.owasp.github.io · read 9 Oct 2026
Findings overview
Before report creation, the application visualizes findings and their statuses in a summary.owasp.github.io · read 9 Oct 2026
Intended users
The project describes itself as a starting point for beginners and says it enables pentests without prior hacking knowledge.owasp.github.io · read 9 Oct 2026
License
Security-C4PO is licensed under the Apache License 2.0.owasp.github.io · read 9 Oct 2026
Project status
OWASP lists Security-C4PO as an incubator project.owasp.org · read 9 Oct 2026
Purpose
Security-C4PO is an open-source web application for managing and documenting penetration tests.owasp.github.io · read 9 Oct 2026
Reporting
It helps pentesters report security vulnerabilities and other risk-related findings and automatically build actionable reports.owasp.github.io · read 9 Oct 2026
Support
The project asks users to report issues or suggestions through its GitHub issue tracker.owasp.github.io · read 9 Oct 2026
Technology
The listed technology badges are Angular, RxJS, Spring, Gradle, and MongoDB.owasp.github.io · read 9 Oct 2026
Workflow
Its interface guides users through penetration tests in the style of the OWASP Testing Guide.owasp.github.io · read 9 Oct 2026

Alternatives to OWASP Security-C4PO

Every alternative, ranked