Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost

WebGoat/WebGoat

WebGoat is a deliberately insecure application

Visit GitHub
JavaScript
9.5k
8.2k
116 contributors
Custom license
website
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast WebGoat/WebGoat is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 5 – Nov 4, 2026

Stars +140 in 61 days

0510
9

Forks +499 in 61 days

0102030
27

Merged PRs 44 in 61 days

051015
11

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 5Sep 13Sep 21Sep 29Oct 7Oct 15Oct 23Oct 31
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Sat, Sep 5, 2026+2+00
Sun, Sep 6, 2026+0+25
Mon, Sep 7, 2026+1+90
Tue, Sep 8, 2026+4+90
Wed, Sep 9, 2026+3+90
Thu, Sep 10, 2026+3+84
Fri, Sep 11, 2026+0+60
Sat, Sep 12, 2026+3+10
Sun, Sep 13, 2026+1+21
Mon, Sep 14, 2026+0+91
Tue, Sep 15, 2026+4+90
Wed, Sep 16, 2026+1+90
Thu, Sep 17, 2026+0+80
Fri, Sep 18, 2026+2+60
Sat, Sep 19, 2026+1+20
Sun, Sep 20, 2026+1+20
Mon, Sep 21, 2026+1+100
Tue, Sep 22, 2026+1+94
Wed, Sep 23, 2026+2+114
Thu, Sep 24, 2026+4+80
Fri, Sep 25, 2026+2+70
Sat, Sep 26, 2026+2+60
Sun, Sep 27, 2026+1+40
Mon, Sep 28, 2026+4+130
Tue, Sep 29, 2026+8+120
Wed, Sep 30, 2026+6+110
Thu, Oct 1, 2026+9+160
Fri, Oct 2, 2026+3+80
Sat, Oct 3, 2026+3+270
Sun, Oct 4, 2026+0+40
Mon, Oct 5, 2026+2+80
Tue, Oct 6, 2026+1+1111
Wed, Oct 7, 2026+4+40
Thu, Oct 8, 2026+0+130
Fri, Oct 9, 2026+2+30
Sat, Oct 10, 2026+4+150
Sun, Oct 11, 2026+3+55
Mon, Oct 12, 2026+2+84
Tue, Oct 13, 2026+3+120
Wed, Oct 14, 2026+0+140
Thu, Oct 15, 2026+2+110
Fri, Oct 16, 2026+1+130
Sat, Oct 17, 2026+2+40
Sun, Oct 18, 2026+1+110
Mon, Oct 19, 2026+3+100
Tue, Oct 20, 2026+5+80
Wed, Oct 21, 2026+3+80
Thu, Oct 22, 2026+3+110
Fri, Oct 23, 2026+4+70
Sat, Oct 24, 2026+1+20
Sun, Oct 25, 2026+2+60
Mon, Oct 26, 2026+0+90
Tue, Oct 27, 2026+2+90
Wed, Oct 28, 2026+1+100
Thu, Oct 29, 2026+1+105
Fri, Oct 30, 2026+3+80
Sat, Oct 31, 2026+2+50
Sun, Nov 1, 2026+2+70
Mon, Nov 2, 2026+3+80
Tue, Nov 3, 2026+3+100
Wed, Nov 4, 2026+3+20
Total+140+49944
  • 1#1 on the list
  • 7Rank that day
  • Not trending
1

    • GitHub trending history

    Where the repository ranked on GitHub Trending, one dot for each day it was on a list

    Sep 19 – Sep 21, 2025Best #4

    #1#5#10#15#20#25
    Top 10
    Oct 2023AprOctAprOctApr
    The left and right arrow keys step from day to day; Home and End go to the first and the last

    Mentions and achievements

    Where people are talking about WebGoat/WebGoat, and every badge it has earned
    1. Jul 71 post

      • 10 repositorios de GitHub para aprender Hacking Ético y Ciberseguridad (Parte 4)

        Read full on Reddit

        r/u_Mateo-1991

    2. 25 days earlier
    3. Jun 121 post

      • Want to improve your bug bounty and application security skills? Here are some intentionally vulnerable applications and labs worth exploring: • OWASP Juice Shop • OWASP crAPI • CloudGoat • VAmPI •…

        Read full on X, posted by @obscaries

        @obscaries · x.com

    You might also like

    Repositories close to WebGoat/WebGoat
    FeaturedAdvertise to 180K+ monthly visitors
    Bifrost

    Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

    digininja/DVWA

    PHP

    Damn Vulnerable Web Application (DVWA)

    14k5k

    webpwnized/mutillidae

    PHP

    OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

    1.5k555

    juice-shop/juice-shop

    TypeScript

    OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

    14.3k18.6k

    s4n7h0/xvwa

    PHP

    XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

    1.8k349

    BrightSec/brokencrystals

    TypeScript

    A Broken Application - Very Vulnerable!

    209326

    stamparm/DSVW

    Python

    Damn Small Vulnerable Web

    884368

    SasanLabs/VulnerableApp

    Java

    OWASP VulnerableApp Project: Break it. Scan it. Reproduce it. Benchmark against it. Improve it.

    480729

    adeyosemanputra/pygoat

    HTML

    intentionally vuln web Application Security in django

    3531.3k

    OWASP/railsgoat

    HTML

    A vulnerable version of Rails that follows the OWASP Top 10

    928738