OWASP Game Security Framework

Quick Navigation

Start Here

Community and Collaboration

  1. Project Status
  2. Repository README
  3. OGSF Framework Draft
  4. Contribution Guidelines
  5. Project Information
  6. Project Leaders

Project Status

The OWASP Game Security Framework (OGSF) project started in January 2025.

From January 2025 to January 2026, the project focused on scoped drafting, structure definition, and close review with selected peers and subject matter experts.

The project is now entering its public review phase so the wider community can review, comment on, and help improve the framework.

Two-Year Roadmap

2026 Goal

Publish OGSF for public review, stabilize the framework structure, build contributor workflow, and prepare the project for OWASP Lab promotion.

Q1 2026 - Public Review Launch

  • Publish the public review draft of OGSF on the OWASP project page and GitHub
  • Clearly define project scope, intended audience, and non-goals
  • Open public feedback channels through GitHub issues and OWASP Slack
  • Publish contribution guidelines and review workflow
  • Standardize project naming, terminology, and document structure

Q2 2026 - Feedback Triage and Framework Refinement

  • Review and triage community comments
  • Resolve structural issues, gaps, overlaps, and inconsistent terminology
  • Refine the verification categories and requirement language
  • Publish an updated draft incorporating public feedback
  • Add initial worked examples to show how OGSF can be applied in practice

Q3 2026 - Release Readiness and Project Hygiene

  • Prepare the first stable OGSF release candidate
  • Improve project documentation, navigation, and release notes
  • Ensure GitHub issues, pull requests, and support channels are actively maintained
  • Confirm leadership, contributor workflow, and roadmap are up to date
  • Prepare evidence and materials needed for OWASP Lab promotion review

Q4 2026 - Stable Release and Lab Promotion Request

  • Publish the first stable public OGSF release
  • Submit the project for OWASP Lab promotion review
  • Address any feedback received during the promotion process
  • Document a maintenance plan for the following year

2027 Goal

Operate OGSF as a stable, community-reviewed project, improve clarity and coverage, and build evidence of adoption and usefulness.

Q1 2027 - OGSF v1.x Consolidation

  • Publish a refined post-review version of OGSF
  • Incorporate promotion review feedback if applicable
  • Improve readability, consistency, and cross-references
  • Expand contributor onboarding materials

Q2 2027 - Examples and Mappings

  • Publish a small set of worked examples showing how OGSF can be used
  • Add or improve mappings to related OWASP resources where useful
  • Clarify level expectations and verification intent
  • Collect implementation and reviewer feedback from early adopters

Q3 2027 - Community Maturity

  • Run focused review cycles on selected sections
  • Encourage external contributions from game developers, security practitioners, and testers
  • Continue release maintenance and issue response
  • Track signs of project usefulness such as references, contributions, downloads, and discussions

Q4 2027 - Maintenance and Next-Step Review

  • Publish an annual update release
  • Review whether the project is ready to remain in sustained Lab maturity or begin planning toward future Production readiness
  • Refresh roadmap, governance, and contributor documentation
  • Document lessons learned from the first public review cycle

What This Roadmap Does Not Include Yet

To keep the project realistic and maintainable, the current two-year plan does not make open-source tooling, annual industry reports, or flagship status a primary objective.

These may be considered later if the project builds enough contributor capacity and long-term maintenance support.

Success Criteria for This Stage

  • Public draft released and reviewed by the community
  • Stable release published and maintained
  • Contribution process and support channels operating consistently
  • Project roadmap and documentation kept current
  • Clear evidence that OGSF provides practical value to reviewers and users
  • Project is in a strong position for or already at OWASP Lab maturity
Watch Star