OWASP Software Component Verification Standard

OWASP Software Component Verification Standard - An OWASP lab project

About OWASP Software Component Verification Standard

Availability

SCVS is available (in English) as PDF, Word (docx), JSON, or XML. These artifacts can be found in the projects GitHub releases. It can also be read online.

Translations

The project maintainers are actively looking for volunteers to translate SCVS into a number of languages. Please reach out on the projects Slack channel or on GitHub if interested.
Corporate Supporters
OWASP Logo
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.