OWASP Application Security Verification Standard (ASVS)
The OWASP Application Security Verification Standard (ASVS) Project provides a basis for testing web application technical security controls and also provides developers with a list of requirements for secure development.
About OWASP Application Security Verification Standard (ASVS)
While this page serves as the project’s official OWASP identity card, the GitHub repository remains the sole source of truth. All master data and project content are managed and hosted exclusively on GitHub.
For more information on the ASVS, go the project's official website.
(If you keep getting redirected to this page, you might need to clear your browser cache. Sorry 🙁)
Project Resources
Project Information
Flagship Project
Classification
Documentation
Language
HTML
License
Creative Commons Attribution Share Alike 4.0 International
Latest Version
5.0.0 (stable)
Contributors
141
GitHub Stars
3722
Downloads
50463
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.