VAP (Vulnerable Application Project) is a small, free and open source deliberately vulnerable web-application that aims to be a learning platform for IT- security professionals and developers to create more secure applications. Developers can analyze the code manually, pentesters can test their skills.