OWASP Security-C4PO

Spec sheet

Purpose

Security-C4PO is an open-source web application for managing and documenting penetration tests.Read 9 Oct 2026 · owasp.github.io

Intended users

The project describes itself as a starting point for beginners and says it enables pentests without prior hacking knowledge.Read 9 Oct 2026 · owasp.github.io

Deployment

The project provides Docker images and a script that pulls and starts the services from Docker Hub.Read 9 Oct 2026 · owasp.github.io

Support

The project asks users to report issues or suggestions through its GitHub issue tracker.Read 9 Oct 2026 · owasp.github.io

License

Security-C4PO is licensed under the Apache License 2.0.Read 9 Oct 2026 · owasp.github.io

Components

The documented Docker setup includes Keycloak, MongoDB, Angular, API, and reporting services.Read 9 Oct 2026 · owasp.github.io

Development requirements

The local development requirements listed are Docker or Docker Compose, OpenJDK 11, and Node 14.15.1 with npm 6.14.8.Read 9 Oct 2026 · owasp.github.io

Findings overview

Before report creation, the application visualizes findings and their statuses in a summary.Read 9 Oct 2026 · owasp.github.io

Project status

OWASP lists Security-C4PO as an incubator project.Read 9 Oct 2026 · owasp.org

Reporting

It helps pentesters report security vulnerabilities and other risk-related findings and automatically build actionable reports.Read 9 Oct 2026 · owasp.github.io

Technology

The listed technology badges are Angular, RxJS, Spring, Gradle, and MongoDB.Read 9 Oct 2026 · owasp.github.io

Workflow

Its interface guides users through penetration tests in the style of the OWASP Testing Guide.Read 9 Oct 2026 · owasp.github.io

Plans and prices

Every OWASP Security-C4PO plan and price →

Where Specifiction places it

• Penetration Testing Software#24 of 347.4