Meet the people behind OWASP projects. Each episode covers one project: why it exists, what it does, and how you can use it or get involved.
OWASP has spent years building projects that help people write, test, and run software more securely. Volunteers and project leaders put a great deal of care into that work. What often gets missed is the conversation around it. Many people in the community have never come across a given project. Others know the name and still are not sure what it does, who it is for, or how to get any use out of it. Familiar names such as the OWASP Top 10 reach a wide audience, and even they can feel distant once you step outside the application security world. Newer and quieter projects deserve the same chance to be understood.
The OWASP Project Spotlight Series started so each project could have that chance. Every episode sits with the people who build and look after one project, and lets them explain it in their own words. The aim is a short, practical introduction: what the project is good for, how someone actually uses it, and who it is meant to help. We stay with a single project long enough to answer the questions people usually have before they try something new.
Each video walks through the same ground:
Why the project was started, and the problem it set out to solve
What it does, in plain terms, and who it is for
How it works, shown with a demo you can follow along with
How you can start using it, contribute, or join the people behind it
If you have heard of an OWASP project and never quite got around to it, this is a place to start. If you look after a project and want the community to see it the way you do, the series is here for that too. The latest episode is below. Earlier episodes are on the Videos tab, and shorter clips are on the Shorts tab.
OWASP Spotlight - Project 40 - OWASP CVE Lite CLI