Main

OWASP BLT (Bug Logging Tool) allows anyone to submit an issue from any website. For example if you saw a broken button on Amazon.com you can report the issue through BLT and then get a point! The more bugs you find the more points you get. Bugs can be verified for extra points and companies can get involved and help out.

Description

OWASP BLT is meant for everyone that uses the internet to help fix it. Any type of issue can be submitted from a button being the wrong color to a serious security vulnerability. BLT follows responsible disclosure ethics.

Licensing

This program is free software: you can redistribute it and/or modify it under the terms of the link GNU Affero General Public License 3.0 as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. OWASP Bugheist and any contributions are Copyright © by the Project Leader(s) 2016.

• [12 Sep 2016] BLT becomes an official OWASP project.

• [18 Jul 2016] Submitted to be an OWASP project.

• [18 Jul 2016] Submitted to be an OWASP project.

• [9 May 2016] Logo created.

• [8 Dec 2015] Someone suggested it become an OWASP project.

• [12 Jan 2012] The idea was born to have a website to make a game out of bug finding and the first mockup was created.

FAQs

How can I participate in your project?

All you have to do is make the Project Leader’s aware of your available time to contribute to the project. It is also important to let the Leader’s know how you would like to contribute and pitch in to help the project meet it’s goals and milestones. There are many different ways you can contribute to an OWASP Project, but communication with the leads is key.

If I am not a programmer can I participate in your project?

Yes, you can certainly participate in the project if you are not a programmer or technical. The project needs different skills and expertise and different times during its development. Currently, we are looking for researchers, writers, graphic designers, and a project administrator. See the Road Map and Getting Involved tab for more details.

Acknowledgements

Contributors

The OWASP Bug Logging Tool Project Template is developed by a worldwide team of volunteers. A live update of project contributors is found here.

The first contributors to the project were:

• Sean Auriti who created the OWASP Bug Logging Tool project

Road Map and Getting Involved

Roadmap

As of September, 2016, the highest priorities for the next 6 months are:

• Get other people to review the Tool Project Template and provide feedback
• Incorporate feedback into changes in the Tool Project Template
• Finalize the Tool Project template and have it reviewed to be promoted from an Incubator Project to a Lab Project
• Complete the full site wireframes
• Hold a design contest.
• Covert design into HTML
• Integrate HTML into database
• Test and fix any issues
• Launch the site

</strong>

Subsequent Releases will add

• Internationalization Support
• Additional Unit Tests
• Automated Regression tests

</strong>

Getting Involved

Involvement in the development and promotion of Tool Project Template is actively encouraged! You do not have to be a security expert or a programmer to contribute. Some of the ways you can help are as follows:

Coding

We could implement some of the later items on the roadmap sooner if someone wanted to help out with unit or automated regression tests

Localization

Are you fluent in another language? Can you help translate the text strings in the Tool Project Template into that language?

Testing

Do you have a flair for finding bugs in software? We want to product a high quality product, so any help with Quality Assurance would be greatly appreciated. Let us know if you can offer your help.

Feedback

Please use the Tool Project Template project mailing list for feedback about:

• What do like?
• What don’t you like?
• What features would you like to see prioritized on the roadmap?

Minimum Viable Product

Our MVP will be a website where users can get points for finding issues on websites.

Project About

NOTOC

Category:OWASP Project Category:OWASP_Builders Category:OWASP_Defenders Category:OWASP_Tool