Open Source Foundation for Application Security (OWASP)

Open Source Foundation for Application Security (wikipedia:OWASP)

• https://www.owasp.org/

Activities

• Read OWASP Top 10 https://owasp.org/www-project-top-ten/

Related terms

• OWASP ZAP
• ASVS
• Common Weakness Enumeration (CWE)
• Daniel Cuthbert
• XML External Entity (XXE)

See also

• CVE, CWE, CVSS, Mitre, NVD, Log4Shell, Dirty Pipe, GHSA, RHSA
• Hardening: CIS, OpenSCAP, Hardenite, patching, Chef InSpec
• OWASP, OWASP ZAP, ASVS, CVE, CWE, CycloneDX
• Pentest, PTaaS, Cloud security, Vulnerability Scanning, MobSF, Cobalt.io, Panorays, Red team, Haveibeenpwned.com
• SCAP, OpenSCAP, /etc/oscapd/config.ini, oscap, OVAL, XCCDF, oscap -V, /etc/oscapd/
• Security organizations: MITRE, NIST, NSA, SANS, OWASP, CERT, Mitre Corporation
• Security standards: SOC2, GDPR (EU), PCI DSS, DISA STIG, NIST 800-53, ISO 27001, OWASP, HIPPA, FedRAMP, FIPS, CCPA, SOX, CIS, GDPR, HITRUST CSF