Version 2.1 of the Secure Coding Practices quick reference guide
provides the numbering system used in the Cornucopia project playing cards.
The OWASP Secure Coding Practices Quick-reference Guide project has now been archived.
The content of the Secure Coding Practices Quick-reference Guide overview and glossary has been migrated
to various sections within the OWASP Developer Guide.
The Secure Coding Practices Quick-reference Guide checklists have also been migrated to the Developer Guide;
this provides a wider audience for the original checklist.
Contact Jon Gadsden for any questions about this move.
The latest stable Spanish language version
along with the latest English language version
are still available on these OWASP project pages.
There is also a work in progress English language version
that shows the final work before being migrated to the
OWASP Developer Guide.
Project Resources
Project Leaders
Keith Turpin
Project Information
Incubator Project
Classification
Other
License
Creative Commons Attribution Share Alike 4.0 International
Contributors
6
GitHub Stars
50
Downloads
48421
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.