Show HN: WattzGOAT – an intentionally vulnerable web app for security training

A web application called WattzGOAT has been created for security training purposes, featuring a fictional electricity utility's customer portal. The application contains 48 intentionally planted vulnerabilities, including most of the OWASP Top 10, which can be found and exploited in a capture-the-flag style. A simulated AI assistant is also included, with its own vulnerabilities, such as prompt-injection style flaws. The application was built with the assistance of AI technology. It is intended to serve as a hands-on lab for teaching web application security.