# What does OWASP Foundation use?

OWASP Foundation (owasp.org) shows public evidence of 17 tools, according to runsonwhat (last checked 2026-11-08).

- LinkedIn: https://www.linkedin.com/company/owasp

## Edge & Hosting

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Cloudflare](https://www.runsonwhat.com/reverse/cloudflare) | CDN & Edge | DNS records, Email records, Website code |  |
| [Amazon Web Services](https://www.runsonwhat.com/reverse/aws) | Hosting & Cloud | Website code |  |
| [Vercel](https://www.runsonwhat.com/reverse/vercel) | Hosting & Cloud | Custom domain, DNS verification records, DNS records, Website code |  |

## Application

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [React](https://www.runsonwhat.com/reverse/react) | Frontend | Website code |  |
| [Tailwind CSS](https://www.runsonwhat.com/reverse/tailwind) | Frontend | Website code |  |
| [Next.js](https://www.runsonwhat.com/reverse/nextjs) | Frontend | Website code |  |
| [Three.js](https://www.runsonwhat.com/reverse/threejs) | Media & UI | Website code |  |
| [Supabase](https://www.runsonwhat.com/reverse/supabase) | Backend & Database | Custom domain, Website code |  |

## Go-to-market

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Mailchimp](https://www.runsonwhat.com/reverse/mailchimp) | Marketing | Email records |  |
| [Read the Docs](https://www.runsonwhat.com/reverse/readthedocs) | Support & Docs | Custom domain |  |

## Company Ops

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Microsoft 365](https://www.runsonwhat.com/reverse/microsoft-365) | Workspace | DNS verification records |  |
| [Google Workspace](https://www.runsonwhat.com/reverse/google-workspace) | Workspace | Email records, Website code |  |
| [SendGrid](https://www.runsonwhat.com/reverse/sendgrid) | Email Delivery | Email records |  |
| [Atlassian](https://www.runsonwhat.com/reverse/atlassian) | Dev Tools | Custom domain, DNS verification records |  |
| [Amazon SES](https://www.runsonwhat.com/reverse/ses) | Email Delivery | Email records, Website code |  |
| [Resend](https://www.runsonwhat.com/reverse/resend) | Email Delivery | Email records |  |

## FAQ

### What tools does OWASP Foundation use?

As of November 2026, runsonwhat has found 17 tools at OWASP Foundation (owasp.org) in public records. Edge & Hosting: Cloudflare, Amazon Web Services and Vercel. Application: React, Tailwind CSS and Next.js. Go-to-market: Mailchimp and Read the Docs. Company Ops: Microsoft 365, Google Workspace and SendGrid. Last checked November 8, 2026.

### What cloud does OWASP Foundation run on?

OWASP Foundation uses Amazon Web Services for hosting and cloud infrastructure, alongside Vercel, according to runsonwhat (November 2026). runsonwhat found Amazon Web Services through Amazon Web Services code on owasp.org. Amazon Web Services is used by 147,636 companies runsonwhat tracks.

### What email provider does OWASP Foundation use?

OWASP Foundation uses Microsoft 365 for email and office software, alongside Google Workspace, according to runsonwhat (November 2026). runsonwhat found Microsoft 365 through a DNS verification record for Microsoft 365. Microsoft 365 is used by 736,657 companies runsonwhat tracks.

### What does OWASP Foundation use for customer support?

OWASP Foundation uses Read the Docs for customer support and documentation, according to runsonwhat (November 2026). runsonwhat found Read the Docs through a subdomain that points at Read the Docs. Read the Docs is used by 144 companies runsonwhat tracks.

### What marketing software does OWASP Foundation use?

OWASP Foundation uses Mailchimp for marketing, according to runsonwhat (November 2026). runsonwhat found Mailchimp through email records that authorize Mailchimp. Mailchimp is used by 119,262 companies runsonwhat tracks.

### Does OWASP Foundation use Cloudflare?

Yes. runsonwhat found Cloudflare at OWASP Foundation through DNS records that point at Cloudflare and email records. Cloudflare is a CDN & Edge tool used by 735,340 companies runsonwhat tracks.

### Which companies have a tech stack similar to OWASP Foundation's?

The companies with the stacks most like OWASP Foundation's are Skawa Innovation, Mithril Security, Forta Freight Traffic Activity and Django Cms, according to runsonwhat (November 2026). Each shares 5 to 7 tools with OWASP Foundation, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.

### How does runsonwhat know what OWASP Foundation uses?

runsonwhat reads public records only. Of the 17 tools at OWASP Foundation, 5 were found through email records, 5 through code on owasp.org, 4 through subdomains that point at the vendor and 3 through DNS records. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and owasp.org about monthly.


---

Source: runsonwhat, https://www.runsonwhat.com/company/owasp.org (updated November 2026). Counts are companies with direct public evidence of the tool (DNS records, certificates, website code, a real-browser crawl, subprocessor lists), so they are lower bounds. Methodology: https://www.runsonwhat.com/methodology.