{"title":"OWASP Games","description":"","products":[{"product_id":"owasp-cumulus-threat-modeling-the-clouds","title":"OWASP Cumulus - Threat Modeling the Cloud","description":"\u003cp\u003eOWASP Cumulus is a gamified approach to integrating security into cloud and DevOps teams. As a variant of the popular card game Elevation of Privilege by Adam Shostack, Cumulus enables teams to threat model DevOps systems.\u003c\/p\u003e\n\u003cp\u003eDeveloped and supported by TNG Technology Consulting, Cumulus helps DevOps teams enhance their security through collaboration and discussion and seamlessly integrates into agile development processes.\u003c\/p\u003e\n\u003cp\u003eThreat model the Ops of DevOps!\u003c\/p\u003e","brand":"Agile Stationery","offers":[{"title":"Default Title","offer_id":55167395791235,"sku":"","price":18.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0913\/9568\/6787\/files\/CUMULUS-CARDS-01.png?v=1742078721"},{"product_id":"owasp-cornucopia-mobile-app-edition-threat-modeling-cards","title":"OWASP® Cornucopia 1.0 Mobile App Edition - Threat Modeling Cards","description":"\u003cp\u003eThe Mobile App Edition is the second Cornucopia deck specifically for threat modeling mobile applications and adheres to the same principles and game rules as the original OWASP Cornucopia. This edition is aligned with OWASP Mobile Application Security Verification Standard (MASVS v2.0) and OWASP Mobile Application Security Testing Guide (MASTG) v1.7.\u003c\/p\u003e\n\u003cp\u003eKey Features:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eMASVS Mapping: \u003c\/strong\u003eDesigned to align with the latest MASVS and MASTG standards.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eReliably Fun \u003c\/strong\u003e- consistent with Elevation of Privilege - and Hearts! Simultaneously competitive and collaborative, due to it's playful and inclusive gameplay.\u003c\/li\u003e\n\u003cli\u003e\u003cspan\u003e\u003cstrong\u003ePlatform and technology-agnostic\u003c\/strong\u003e - useful for everyone from PHP hackers, through Java wranglers, to PhD security experts\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eConvenient tarot size -\u003c\/b\u003e matching our collection of tarot sized threat modeling games\u003cstrong\u003e\u003c\/strong\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eOWASP is a registered trademark of the OWASP Foundation.\u003c\/p\u003e\n\u003c!----\u003e","brand":"Agile Stationery","offers":[{"title":"Default Title","offer_id":55167399821699,"sku":"","price":15.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0913\/9568\/6787\/files\/Untitled_design_64.png?v=1778399105"},{"product_id":"owasp-cornucopia-2-1-website-app-edition-threat-modeling-cards","title":"OWASP® Cornucopia 2.1 Website App Edition - Threat Modeling Cards","description":"\u003cp\u003eOWASP® Cornucopia 2.1 is an updated threat modeling tool in the form of a card game designed to help software development teams identify security requirements in Agile, conventional, and formal development processes.\u003c\/p\u003e\n\u003cp\u003eThe latest edition features a simplified layout with cleaner styling for improved usability and addition of SAFECode and CAPEC mappings to enhance threat coverage and traceability. \u003c\/p\u003e\n\u003cp\u003eThe deck contains 80 tarot-style cards, each representing a \u003cspan\u003ecommon error or anti-pattern based on data from OWASP experts, that allows systems to be vulnerable to attack\u003c\/span\u003e . The cards are divided into six suits: Data Validation and Encoding, Authentication, Session Management, Authorization, Cryptography, and a catch-all \"Cornucopia\" suit.\u003c\/p\u003e\n\u003cp\u003eVersion 2.1 is available with and without QR codes on the cards\u003c\/p\u003e\n\u003cp\u003eThis tool is accessible to all skill levels, from beginners to security experts, and aligns with widely-recognized standards such as OWASP ASVS, MASVS, MASTG, SAFECode, SCP, and CAPEC. The new versions contains the updated OWASP ASVS Mapping, aligned with ASVS v4.0.\u003c\/p\u003e\n\u003cp\u003eAlso available in a \u003ca href=\"https:\/\/agilestationery.com\/products\/owasp-cornucopia-mobile-app-edition-threat-modeling-cards-copy\" rel=\"noopener\" target=\"_blank\"\u003emobile edition!\u003c\/a\u003e\u003cstrong\u003e\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eOWASP is a registered trademark of the OWASP Foundation.\u003c\/p\u003e\n\u003c!----\u003e","brand":"Agile Stationery","offers":[{"title":"Default Title","offer_id":55622568870275,"sku":"","price":15.0,"currency_code":"GBP","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0913\/9568\/6787\/files\/OWASP-2.1-Cards-grouped_40f1399d-23c1-490e-a55d-b66f5aa00bb2.png?v=1744995140"},{"product_id":"branded-owasp-cornucopia-deck-80-cards","title":"Branded OWASP Cornucopia deck - 80 cards","description":"\u003cp\u003eThe core threat-modelling deck for web applications. A practical choice for development teams, security workshops, training sessions, conferences and customer engagement.\u003c\/p\u003e","brand":"Cybersec Games","offers":[{"title":"Custom cards \u0026 box","offer_id":55377679090051,"sku":"","price":45.0,"currency_code":"GBP","in_stock":true},{"title":"Unbranded cards in custom box","offer_id":55377679122819,"sku":"","price":36.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0913\/9568\/6787\/files\/Untitled_design_69.png?v=1778410039"},{"product_id":"branded-owasp-cumulus-deck-60-cards","title":"Branded OWASP Cumulus deck - 60 cards","description":"","brand":"Cybersec Games","offers":[{"title":"Custom cards \u0026 box","offer_id":55377700618627,"sku":"","price":40.0,"currency_code":"GBP","in_stock":true},{"title":"Unbranded cards in custom box","offer_id":55377700651395,"sku":"","price":32.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0913\/9568\/6787\/files\/Branded_OWASP_Cumulus_deck.png?v=1745166315"},{"product_id":"owasp®-cornucopia-3-0-website-app-edition-threat-modeling-cards-copy","title":"OWASP® Cornucopia 3.0 Website App Edition - Threat Modeling Cards","description":"\u003cp\u003eOWASP® Cornucopia is a threat modeling tool in the form of a card game designed to help software development teams identify security requirements in Agile, conventional, and formal development processes.\u003c\/p\u003e\n\u003cp data-start=\"456\" data-end=\"662\"\u003eThe deck is widely used in secure design workshops, architecture reviews, and Agile development teams, providing a simple way to introduce application security thinking early in the development process.\u003c\/p\u003e\n\u003cp data-start=\"664\" data-end=\"829\"\u003eEach card represents a potential security concern or attack pattern, prompting discussion about how a system might be misused and what controls should be considered.\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003eOWASP is a registered trademark of the OWASP Foundation.\u003c\/em\u003e\u003c\/p\u003e\n\u003c!----\u003e","brand":"Agile Stationery","offers":[{"title":"Default Title","offer_id":57543248445827,"sku":null,"price":20.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0913\/9568\/6787\/files\/Untitled_design_69.png?v=1778410039"},{"product_id":"branded-owasp-cornucopia-deck-80-cards-copy","title":"Branded OWASP Cornucopia Companion Edition","description":"\u003cp\u003eThe companion deck for teams that want to explore emerging and specialist areas in greater depth, including AI, cloud, DevOps, frontend security and automated threats.\u003c\/p\u003e","brand":"Cybersec Games","offers":[{"title":"Custom cards \u0026 box","offer_id":58180930208131,"sku":null,"price":45.0,"currency_code":"GBP","in_stock":true},{"title":"Unbranded cards in custom box","offer_id":58180930240899,"sku":null,"price":36.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0913\/9568\/6787\/files\/Render_Mockup_4000_3000_2026-06-03.png?v=1780497335"}],"url":"https:\/\/cybersecgames.com\/collections\/owasp-games.oembed","provider":"CyberSec Games","version":"1.0","type":"link"}