OWASP Application Security Verification Standard (ASVS)

The OWASP Application Security Verification Standard (ASVS) Project provides a basis for testing web application technical security controls and also provides developers with a list of requirements for secure development.

About OWASP Application Security Verification Standard (ASVS)

Introduction

Within the ASVS project, we gratefully recognise the following organizations who support the OWASP Application Security Verification Standard project through monetary donations or allowing contributors to spend significant time working on the standard as part of their work with the organization. We recognise various tiers of support and the amount of time the supporter is recognised for depends on the supporter level. On this page and the project web page, we will display the supporter’s logo and link to their website and we will publicise via Social Media as well. If you would like to directly become a Primary, Secondary or Tertiary supporter, you can make a donation to OWASP of $1,000 or more and choose to “restrict your gift”. Alternatively, when you pay your corporate membership you can choose to allocate part of your membership fee to the ASVS where the allocated amount will govern which level of supporter you become.

• donation to OWASP

• allocate part of your membership fee to the ASVS

Maintaining Supporters (through time provision)

Organizations who have allowed contributors to spend significant time working on the standard as part of their working day with the organization. This will be evaluated at the sole discretion of the project leaders. Supporter will be listed 2 years from the end of the time provision.

Primary supporters

Organizations who have donated $7,000 or more to the project via OWASP. Supporter will be listed in this section for 3 years from the date of the donation.

Secondary supporters

Organizations who have donated $3,000 or more to the project via OWASP. Supporter will be listed in this section for 2 years from the date of the donation.

Tertiary supporters

Organizations who have donated $500 or more to the project via OWASP. Supporter will be listed in this section for 1 year from the date of the donation.

Associate supporters

Organizations who have donated another amount to the project via OWASP. Supporter will be listed in this section for 1 year from the date of the donation.

Project Resources

Project Leaders

Daniel Cuthbert

Project Leader

Elar Lang

Project Leader

Josh Grossman

Project Leader

Project Information

Flagship Project

Classification

Documentation

Language

HTML

License

Creative Commons Attribution Share Alike 4.0 International

Latest Version

5.0.0 (Bleeding Edge)

Contributors

141

GitHub Stars

3626

Downloads

43972

Requirements

Web application security knowledge
Understanding of security testing methodologies
Familiarity with security controls and frameworks
Basic knowledge of web application architecture
Security assessment tools and techniques

Corporate Supporters

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.