Home › AI Agents & LLM Tools › WattzGOAT
WattzGOAT
An intentionally vulnerable web app for security training
| Built with | AI (tool not stated) |
|---|---|
| Category | AI Agents & LLM Tools |
| Maker | wattzgoat |
| Launched | 2026-09-30 |
| Source | Hacker News Show HN · 3 points |
| Link checked | 2026-11-02 |
How we know it was built with AI
- AI (tool not stated): “built this with AI”
Quoted from the source post. Category is assigned automatically.
From the maker
Built this as a hands-on lab for teaching web application security. It is a fictional electricity utility's customer portal with 48 deliberately planted flags (most of OWASP Top 10) you find and exploit CTF-style, including a simulated (rule-based, not a real model) AI assistant with its own prompt-injection-style vulnerabilities.
From the website
WattzGOAT is an intentionally vulnerable web application. - wattzgoat/wattzgoat-web
Similar apps
Weir
Catch credential leaks in the AI agents you build and use
pw-repl
A Playwright-powered REPL for you and your agents to share
SlopGrid
Create your own oneshot AI model benchmarks
chromewebstore.google.com
Rename Super Intelligence Back to Artificial Intelligence
Proxima Forma
Designs that my AI agents understand
Sokit
A LangChain like harness for Jev (or other System 1 models)