OWASP Developer Guide
The OWASP Developer Guide provides an introduction to security concepts and an initial reference for application and system developers.
The content of the Developer Guide aims to be accessible, introducing practical security concepts and providing enough detail to get developers started on various OWASP tools and documents.
The expected audience of the Developer Guide is application developers working in various domains such as web, desktop, mobile, API and cloud.
The OWASP Developer Guide aims to be accessible,
and translations help to make is a useful resource for the global AppSec community.
The English (US) language version is the source for all the translations;
the latest version can be found in the DevGuide repository.
As of January 2026 there are multiple translations in progress:
If you can help with these translations then please contact the lead translator or the DevGuide project leaders.
OWASP DevGuide: accessible security for developers
Project Resources
Project Leaders
Jon Gadsden
Project Leader
Jon is a leader for the OWASP Developer Guide and Threat Dragon projects. For some years he was an OWASP Chapter leader for Bristol, England, and still helps out with organising these chapter meetings.
Project Information
Lab Project
Classification
Other
License
Creative Commons Attribution Share Alike 4.0 International
Contributors
37
GitHub Stars
2175
Downloads
3775
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.