This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

OWASP STING Game Project

Revision as of 05:12, 21 August 2014 by Tony Turner (talk | contribs)

Jump to: navigation, search
OWASP Project Header.jpg

OWASP STING Game Project

The OWASP STING Game Project is a card game in downloadable format or if funded, printed and distributed at OWASP events.


STING is a combative card game in the style of Magic the Gathering designed to teach application security attack and defense. Players will simultaneously attack other players apps while defending their own and supporting game business objectives.


The objective of STING is to simulate an industrial espionage hacking scenario where the objective is to attack your competitor, steal their secrets, damage their marketshare and achieve dominance in your product space all while ensuring your own applications don't get pwned.


The OWASP STING GAME is free to use. It is licensed under the Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

What is the OWASP STING Game Project?

OWASP STING Game Project provides:

  • AppSec gameplay
  • Basic appsec knowledge
  • Aligned with other OWASP projects - Some OWASP projects will get their own game card
  • Gateway "drug"


Link to presentation

Project Leader

  • Tony Turner - Founder and Project Leader
  • Andrew Johnson - Co-Leader

Related Projects

Quick Download

  • Link to page/download

Email List

Project Email List

News and Events

  • [20 Nov 2013] News 2
  • [30 Sep 2013] News 1

In Print

This project can be purchased as a print on demand book from


New projects.png Owasp-builders-small.png
Project Type Files DOC.jpg
What is STING written in?
Text for now. This is a physical card game, not an app. Perhaps once we have the hard copy game we will look at building a web or mobile app.


STING Game is developed by a worldwide team of volunteers. The primary contributors to date have been:

  • Tony Turner
  • Andrew Johnson


  • (TBD)
  • (TBD)

As of August 2014, the priorities are:

  • Initial Concept
  • Initial Ruleset
  • Alpha Testing of Game Mechanics
  • Commission Game Art
  • Refine Ruleset
  • Produce Decks
  • Beta Test
  • Release

Involvement in the development and promotion of XXX is actively encouraged! You do not have to be a security expert in order to contribute.

Some of the ways you can help:

  • Artists and Designers
  • Game designers
  • Gamers to test gameplay
  • Technical critique