OWASP Certified Secure Developer

OCSD is intended for web application developers who want to demonstrate foundational security knowledge and for hiring managers who need to assess that knowledge.

This certification program is an answer to the questions a hiring manager for a developer might ask, to validate security knowledge of the candidate. It is also for the developers who want to showcase their skills in developing secure code.

Remember:

• Writing secure code != testing the security of code with tools

• If developers do not put security in the code, no one else will

The questions we may want to ask are:

• If I am hiring a web application developer, what are the security-related skills I would look for?

• If I were a web application developer, what security skills would I like to be validated for?
  

GitHub Repo: https://github.com/OWASP/OCSD

Working Group Chair: Shruti Kulkarni