Damn Vulnerable Web Application (DVWA)

All repositories

Overview

HEALTH SCORE

Excellent*

Partial score (2/3 categories)

58out of 65

Strong maintainer coverage. Development cadence is the only remaining gap. Security & Supply Chain is unavailable, so weights were redistributed.

LIFECYCLE

Active

Consistent commits, responsive maintainers, regular releases, and healthy issue triage.

Display your project Health score on your GitHub page.

Health breakdown

Excellent*(58/65)

Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.

Maintainer responsiveness

Median response time is 0 days.

Bus factor

3 active maintainers currently have merge rights.

Organization Diversity

Contributors span 158 organizations.

Project Achievements

Leaderboards

About

Damn Vulnerable Web Application (DVWA) is a deliberately insecure PHP/MySQL web application designed to help security professionals test their skills and tools in a legal environment. It provides a training platform for practicing common web vulnerabilities like SQL injection, XSS, CSRF, and file inclusion.

First commit

May 2013

Software value

$573K