How to use this reference
Use an isolated, explicitly authorized training copy to study application trust boundaries and remediation choices. Pair conceptual findings with the linked defensive guidance rather than treating challenge success as evidence about a real service.
Before reading
- A browser and basic HTTP/application concepts.
- A suitable local training environment; the provider documents several installation options. No installation was performed.
Context and limits
- This application is deliberately vulnerable. Keep exercises within an isolated training deployment you own or are explicitly authorized to use.
- Tutorial availability and challenge counts vary by version. No public demo or local lab was tested.
- Project leaders are identified on the official page; no individual authorship of the complete application is asserted here.
- The release date belongs to the educational training application, not the original project-page publication.
- Training application release v20.2.0 is dated 2026-08-10 in the official release source. It is retained as maintenance evidence; no dated document edition is asserted.
Sources and provenance
- OWASP Juice Shop OWASP Foundation · reviewed 2026-10-12
- Overview: OWASP Juice Shop OWASP Juice Shop · reviewed 2026-10-12
- Learning: OWASP Juice Shop OWASP Juice Shop · reviewed 2026-10-12
- News: OWASP Juice Shop OWASP Juice Shop · reviewed 2026-10-12
Record reviewed 2026-10-12. Snapshot cb017eaea66e. Open the complete JSON contract.