Security & privacy

Open Worldwide Application Security Project

OWASP

The short version

OWASP is a nonprofit community that makes free guides and tools for software security, including the web app Top 10.

A shared guide to software risks

The OWASP Top 10 lists major web app risks, such as weak access rules, unsafe handling of input, and poor security settings. Teams use it to decide what to investigate.

OWASP also offers free testing guides, standards, and tools.

A starting point

Teams use the Top 10 as a starting guide and examine risks specific to their product’s data, users, and systems.