OWASP Secure Coding Practices-Quick Reference Guide
Main
Welcome to the Secure Coding Practices Quick Reference Guide Project
The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.
The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.
It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.
Sections of the Guide:
- Table of contents
- Introduction
- Software Security Principles Overview
- Secure Coding Practices Checklist
- Links to useful resources
- Glossary of important terminology
Download the current v2 (Stable) release:
Translations:
- Brazilian Portuguese Translation PDF
- Portugal Portuguese Translation PDF
- Korean Translation PDF
- Spanish Translation doc
- Chinese Translation PDF
Related Presentations: This slide deck incorporates many concepts from the Quick reference guide, but also utilizes other OWASP resources. Web Application Development Dos and Donts - Presentation from the Royal Bank of Scotland
Related Projects: Go programming language secure coding practices guide, based on the OWASP Secure Coding Practices
Project Feedback and Disposition History
Feedback and Participation:
I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [email protected].
Project mailing list and archives: subscription page.
Project Contributors:
If you contribute to this Project, please add your name here Project Lead:
Contributors: * Dan Kranz
- Walt Pietrowski
- Catherine Spencer
- Caleb McGary
- Brad Causey
- Ludovic Petit
- Michael V. Scovetta
- Jim Manico
- Jason Coleman
- Anurag Agarwal
- Andrew Petukhov
Translation Contributors
Portuguese Translation * Tarcizio Vieira Neto
Korean Translation * OWASP Korea chapter Spanish Translation * Canedo,Gerardo
- Flores,Mauro
- Hill,Alberto
- Martinez,Mateo
- Papaleo,Mauricio
- Soarez,Nicolás
- Targetta, Cecilia
Chinese Translation * Jie Wang
- Yongliang He
- Henghui Lin
Project About
NOTOC
Secure Coding Practices - Quick Reference Guide Category:OWASP_Document Category:OWASP Best Practices Category:OWASP_Download OWASP Release Quality Document Category:SAMM-SR-1
Example
Put whatever you like here: news, screenshots, features, supporters, or remove this file and don’t use tabs at all.