https://cornucopia.owasp.orgenOwasp Cornucopia is a CyberSecurity card game, meant to be played in an agile development context. It allows developers to identify and discuss security requirements for their software applications. It is an easy way to introduce the practice of threat modeling in a software development team.https://cornucopia.owasp.org/images/opengraph.pnghttps://cornucopia.owasp.orghttps://cornucopia.owasp.org/news/20260910-owasp-cornucopia-mobile-app-edition-v2We are happy to announce the release of the OWASP Cornucopia Mobile App Edition v2.0. The latest edition is compatible with MASVS v2.1, MASTG v2.0, and MASWE v1.0, and features 80 threats that cover a...https://cornucopia.owasp.org/news/20260910-owasp-cornucopia-mobile-app-edition-v2OWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecurityaimobilev2.0Thu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260822-threatsutra-gsoc-2026-final-reportHow ThreatSutra turns an OWASP Threat Dragon model into validated evil user stories, BDD verification tests, and GitHub Issues - automatically built during Google Summer of Code 2026....https://cornucopia.owasp.org/news/20260822-threatsutra-gsoc-2026-final-reportOWASP Cornucopiagsocgsoc2026owaspcornucopiathreatsutrathreat-modelingthreat-dragonsecurityai-agentautomationaiThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260820-automating-print-ready-card-decks-with-scribusHow Cornucopia's card decks became print-ready PDFs without InDesign, built during Google Summer of Code 2026....https://cornucopia.owasp.org/news/20260820-automating-print-ready-card-decks-with-scribusOWASP Cornucopiagsocgsoc2026owaspcornucopiascribusprintingautomationThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260819-eop-card-browser-gsoc-2026-final-reportHow the Elevation of Privilege (EoP) game was added to Cornucopia's card browser and API during GSoC 2026....https://cornucopia.owasp.org/news/20260819-eop-card-browser-gsoc-2026-final-reportOWASP Cornucopiagsocgsoc2026owaspcornucopiaeopthreat-modelingThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260721-owasp-cornucopia-v3-with-eop-and-phantom-bOWASP Cornucopia v3 with EoP and PHANTOM-B...https://cornucopia.owasp.org/news/20260721-owasp-cornucopia-v3-with-eop-and-phantom-bOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecurityaiThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260617-dbd-cornucopiaDBD Cornucopia is now available to play online!...https://cornucopia.owasp.org/news/20260617-dbd-cornucopiaOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecuritydbdThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260525-become-a-cornucopia-sponsorEnhance Your Brand’s Commitment to Security by Sponsoring OWASP Cornucopia...https://cornucopia.owasp.org/news/20260525-become-a-cornucopia-sponsorOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecuritysponsorsThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260508-companion-editionThe Cornucopia of Gamified Threat Modeling...https://cornucopia.owasp.org/news/20260508-companion-editionOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecurityagileThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260324-the-cornucopia-of-gamified-threat-modelingThe Cornucopia of Gamified Threat Modeling...https://cornucopia.owasp.org/news/20260324-the-cornucopia-of-gamified-threat-modelingOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecurityagileThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260302-cornucopia-juice-shop-challengeThe OWASP Juice Shop and OWASP Cornucopia cheat shee...https://cornucopia.owasp.org/news/20260302-cornucopia-juice-shop-challengeOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecurityagilejuiceshopThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260225-straight-to-the-ace-threat-modeling-through-gamificationHow OWASP Cornucopia helps software teams develop a security mindset through gamification...https://cornucopia.owasp.org/news/20260225-straight-to-the-ace-threat-modeling-through-gamificationOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingsecurityagileThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20260215-owasp-cornucopia-is-publishing-its-darkest-secretsOWASP Cornucopia is publishing it's darkest fears and secrets!...https://cornucopia.owasp.org/news/20260215-owasp-cornucopia-is-publishing-its-darkest-secretsOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingdesignThu, 01 Jan 2026 00:00:00 GMThttps://cornucopia.owasp.org/news/20251113-owasp-cornucopia-a-call-for-card-game-designersOWASP Cornucopia 3.0 - A call for card game designers!...https://cornucopia.owasp.org/news/20251113-owasp-cornucopia-a-call-for-card-game-designersOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingdesignWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20251001-owasp-cornucopia-website-edition-version-2.2OWASP Cornucopia Website Edition v2.2...https://cornucopia.owasp.org/news/20251001-owasp-cornucopia-website-edition-version-2.2OWASP Cornucopiaowaspcornucopiagamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20250623-threat-modeling-your-cloud-using-owasp-cumulusThreat modeling your AI models using AI?...https://cornucopia.owasp.org/news/20250623-threat-modeling-your-cloud-using-owasp-cumulusOWASP Cornucopiaowaspcornucopiacopigamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20250807-owasp-cornucopia-companion-editionOWASP Cornucopia Companion Edition...https://cornucopia.owasp.org/news/20250807-owasp-cornucopia-companion-editionOWASP Cornucopiaowaspcornucopiagamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20250611-threat-modeling-your-ai-models-using-aiThreat modeling your AI models using AI?...https://cornucopia.owasp.org/news/20250611-threat-modeling-your-ai-models-using-aiOWASP Cornucopiaowaspcornucopiacopigamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20250519-copi-a-game-engine-for-owasp-cornucopia-threat-modelingCopi - A Game Engine for OWASP® Cornucopia Threat Modeling...https://cornucopia.owasp.org/news/20250519-copi-a-game-engine-for-owasp-cornucopia-threat-modelingOWASP Cornucopiaowaspcornucopiacopigamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20250216-owasp-cornucopia-website-app-21-mobile-app11OWASP® Cornucopia Website App 2.1 & Mobile App 1.1!...https://cornucopia.owasp.org/news/20250216-owasp-cornucopia-website-app-21-mobile-app11OWASP Cornucopiaowaspcornucopiamobilegamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20250214-how-to-pass-the-owasp-masvs-verification-by-desiginHow to pass the OWASP MASVS verification by design?...https://cornucopia.owasp.org/news/20250214-how-to-pass-the-owasp-masvs-verification-by-desiginOWASP Cornucopiaowaspcornucopiamobilegamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20250204-how-to-gamify-threat-modeling-and-application-security-designHow do you gamify threat modeling and application security design?...https://cornucopia.owasp.org/news/20250204-how-to-gamify-threat-modeling-and-application-security-designOWASP Cornucopiaowaspcornucopiamobilegamificationthreat-modelingWed, 01 Jan 2025 00:00:00 GMThttps://cornucopia.owasp.org/news/20240609-owasp-cornucopia20OWASP® Cornucopia 2.0...https://cornucopia.owasp.org/news/20240609-owasp-cornucopia20OWASP Cornucopiaowaspcornucopiamobilegamificationthreat-modelingMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20240517-cornucopia-talk-owasp-belgiumCornucopia talk OWASP chapter belgium...https://cornucopia.owasp.org/news/20240517-cornucopia-talk-owasp-belgiumOWASP CornucopiaowaspscrumMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20240425-use-cornucopia-for-productbacklog-planningUse Cornucopia for planning your security features into your product backlog...https://cornucopia.owasp.org/news/20240425-use-cornucopia-for-productbacklog-planningOWASP CornucopiaagilescrumMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20240328-beyond-devsecops-implement-owasp-top-10-by-playing-cornucopiaBeyond DevSecOps - Implement OWASP Top 10 by playing Cornucopia...https://cornucopia.owasp.org/news/20240328-beyond-devsecops-implement-owasp-top-10-by-playing-cornucopiaOWASP CornucopiaagilescrumMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20240314-implement-owasp-top10-guidelines-by-playing-cornucopiaImplement the OWASP top 10 guidelines by playing the Cornucopia cardgame - in numbers...https://cornucopia.owasp.org/news/20240314-implement-owasp-top10-guidelines-by-playing-cornucopiaOWASP Cornucopiaowasp-top10AgileMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20240229-a-deep-dive-into-the-information-on-a-cornucopia-cardA deep dive into the information on a cornucopia card...https://cornucopia.owasp.org/news/20240229-a-deep-dive-into-the-information-on-a-cornucopia-cardOWASP CornucopiaDeep-DiveMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20240215-three-scenarios-for-transforming-a-cornucopia-card-into-a-product-backlog-itemThree easy ways to go from card to Product Backlog Item. Cornucopia is aimed at the developer, not the security engineer. Therefore, we feel that there should be an easy way to go from identifying a t...https://cornucopia.owasp.org/news/20240215-three-scenarios-for-transforming-a-cornucopia-card-into-a-product-backlog-itemOWASP CornucopiascrumagileMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20240201-how-to-start-with-cornucopiaHow to start with Cornucopia in a Scrum team Individually or as a team, you have decided that you want to improve the level of cybersecurity of your applications by integrating an Appsec process in yo...https://cornucopia.owasp.org/news/20240201-how-to-start-with-cornucopiaOWASP CornucopiascrumagileMon, 01 Jan 2024 00:00:00 GMThttps://cornucopia.owasp.org/news/20231210-why-play-cornucopiaWhy Play Cornucopia? Welcome! If you're interested in building secure applications, you're at the right place! Playing Cornucopia not only sharpens your own security skills but it will help you rans...https://cornucopia.owasp.org/news/20231210-why-play-cornucopiaOWASP CornucopiascrumagileSun, 01 Jan 2023 00:00:00 GMT