✅ Update queued — the AI is re-ranking this list. The page will refresh shortly.
This page is already up to date.
A PHP/MySQL web application that is damn vulnerable, designed to be hacked to practice web security.
A deliberately insecure web application maintained by OWASP to practice web security skills.
An intentionally insecure web application for security training, maintained by OWASP.
A virtual training environment for web application security testing.
Your feedback helps us improve the AI rankings.
✅ Thanks for your feedback!
Suggest a product and our AI will verify it's a real alternative to Damn Vulnerable Web Application before adding it to the list.