About OWASP Foundation
OWASP is a nonprofit foundation that works on software security. Its open source projects, guides and standards are free to use, and its members run local chapters and events around the world.
What it does
OWASP publishes well known resources for application security, including the Top 10 list of major web risks, the ASVS standard for testing application security, and ZAP, an open source security testing tool. It also runs events and a network of chapters where people share ideas and practise.
Key features
- Top 10 list of common web application risks
- ASVS standard for verifying application security
- ZAP, a free tool for testing web applications
- Hundreds of community-led security projects
- Local chapters and global conferences
Who it's for
- Developers who want practical guidance on writing secure code
- Security engineers and testers looking for shared standards
- Students and newcomers learning application security
Pricing and good to know
The projects, tools and educational material on the site are free to use. Companies can become corporate supporters to fund the foundation, and conferences and events have their own registration. The material is a starting point, so check each project's documentation for its current status and version.
Highlights
- Top 10 list of common web application risks
- ASVS standard for verifying application security
- ZAP, a free tool for testing web applications
- Hundreds of community-led security projects
- Local chapters and global conferences
