OWASP Nest is a comprehensive, community-first platform built to enhance collaboration and contribution across the OWASP community. The application serves as a central hub for exploring OWASP projects and ways to contribute to them, empowering contributors to find opportunities that align with their interests and expertise.
Key features of the platform include:
- Advanced Search Capabilities: Enables efficient navigation and filtering of projects and issues based on keywords, tags, and contributor preferences.
- Slack Integration: Supports seamless communication through a Slack bot that facilitates direct and channel messaging for updates and discussions.
- OWASP Chapters Proximity Page: Offers localized information about nearby OWASP chapters to foster community engagement.
- AI-Generated Insights: Provides summarized descriptions and actionable steps for tackling project issues.
OWASP Nest promotes collaboration, making it easier for both new and experienced contributors to engage meaningfully with OWASP's mission to improve software security worldwide.
OWASP Nest is led by a dedicated team committed to fostering collaboration and supporting contributors. The leadership team ensures the platform aligns with OWASP's mission, continually improving its features to serve the community better. Current Leaders:
- Arkadii Yakovets -- CCSP, CISSP, CSSLP
- Kate Golovanova -- CC
- Starr Brown -- CISSP
All OWASP Nest leaders are certified ISC2 professionals and adhere to the OWASP Code of Conduct. For questions or discussions with the leadership team and other contributors, please use the #project-nest channel on OWASP Slack.
OWASP Nest thrives on community contributions. Whether you are a developer, designer, writer, or enthusiast, there are various ways to get involved:
- Code Contributions: Help improve the platform by fixing issues or adding new features.
- Code Review: Review and provide feedback on pull requests to ensure code quality and maintainability.
- Documentation: Enhance user guides or create tutorials to help others navigate the platform.
- Issue Reporting: Identify and report bugs or suggest improvements.
- Engagement: Share feedback, participate in discussions, or promote the project in your network.
To get started, visit the OWASP Nest Repository, explore the Contributing Guidelines, and Code of Conduct.
OWASP Nest was originally created by Arkadii Yakovets (Ark) to address challenges in navigating OWASP projects. The project was built from scratch based on Ark's ideas and discussions with Starr Brown (Starr), ensuring a well-structured system design aligned with OWASP's ecosystem. Ark, an experienced software development professional with over 10 years of expertise in Python, Django, Django REST Framework (DRF), and related backend technologies, led the development of the backend using widely adopted Python open-source frameworks and libraries, including DRF, django-filter, OpenAI, Algolia Search, slack-bolt, PyGitHub, pre-commit, pytest, and more. The initial frontend, based on Vue.js, was introduced by Kateryna Golovanova (Kate), who later became the project co-leader due to her invaluable frontend and project management skills. The code is licensed under the MIT License, encouraging contributions while protecting the authors from legal claims. All OWASP Nest leaders are OWASP members and adhere to the OWASP Code of Conduct.
Over time, OWASP Nest has expanded to address broader OWASP community needs, such as Google Summer of Code (GSoC) student guidance and contribution opportunities discovery. The platform, along with NestBot, has become a popular entry point for various OWASP aspects, including projects, chapters, users, and aggregated contribution opportunities -- with even more features planned. OWASP Nest's success is also the result of many valuable contributions from the broader OWASP Nest community, whose efforts have helped shape and improve the project in countless ways.
No other OWASP projects' code was used in OWASP Nest's development. While explicit attribution (other than per MIT license) is not required, contributors and other OWASP project leaders are welcome to provide it at their discretion.
- BlueSky
- OWASP Slack -- join #project-nest