https://wiki.owasp.org/api.php?action=feedcontributions&feedformat=atom&user=HblankenshipOWASP - User contributions [en]2026-04-16T14:53:58ZUser contributionsMediaWiki 1.27.2https://wiki.owasp.org/index.php?title=About_OWASP/HR&diff=256692About OWASP/HR2021-10-11T15:15:46Z<p>Hblankenship: </p>
<hr />
<div>__NOTOC__<br />
<br />
{| <br />
|-<br />
| style="vertical-align: top;" | [[Image:Staff_mike.jpg|140 px|left]]<br />
| <h1>Mike McCamon</h1><br />'''Executive Director'''<br />Kansas<p>The Executive Director is ultimately responsible for overseeing the administration, programs and strategic plan of the organization.</p><br />
|-<br />
| style="vertical-align: top;" |[[Image:Staff_emily.jpg|140 px|left]]<br />
| <h1>Emily Berman</h1><br />'''Director of Events'''<br />Colorado<p>The Director of Events is responsible for the success of the Company’s event programming including global events and other initiatives. Additionally the Events Director will collaborate with leaders, members, and partners to grow and evolve our regional and local events.</p><br />
|-<br />
| style="vertical-align: top;" |[[Image:Staff_harold.jpg|140 px|left]]<br />
| <h1>Harold Blankenship</h1><br />'''Director of Technology & Projects'''<br />Texas<p>The Director of Technology & Projects nurtures, manages, facilitates, and supports the volunteer open source programs of the Foundation. Additionally the Director of Technology & Projects will, with the support of staff and partners, champion, manage, and execute the technology roadmap of the Foundation.</p><br />
|-<br />
| style="vertical-align: top;" |[[Image:Staff_kelly.jpg|140 px|left]]<br />
| <h1>Kelly Santalucia</h1><br />'''Director of Corporate Support'''<br />New Jersey<p>The Director of Corporate Support identifies, nurtures, develops, documents, solicits, and closes sponsorships and grants for the Foundation and its mission. Also the Director of Corporate Support will collaborate with staff, leaders, and members to improve our membership and events offerings for partners.</p><br />
|-<br />
| style="vertical-align: top;" |[[Image:Dawn_picture_2.jpg|140 px|left]]<br />
| <h1>Dawn Aitken</h1><br />'''Community & Operations Manager'''<br />Florida<p>The Community & Operations Manager proactively runs the Foundation’s core business and chapter functions in a professional, consistent, efficient, and cost-effective manner. Generally these functions include opening and closing local chapters; proactively supporting chapter leaders; regularly ensuring the accuracy and integrity of chapter, member and other data; leadership and primary liaison for accounts payable; and semi-annually audit processes and signatory authorities ensuring issues are resolved. Additionally the Community & Operations Manager along with support from staff and partners will accurately document and implement the policies of the Foundation.</p><br />
|-<br />
| style="vertical-align: top;" |[[Image:Staff_lisa.jpg|140 px|left]]<br />
| <h1>Lisa Jones</h1><br />'''Sales & Marketing Operations Manager'''<br />North Carolina<p>The Sales & Marketing Operations Manager supports and coordinates core communication, promotional, member, and sales functions of the Foundation. Generally these functions include the development and execution of professional, regular, and impactful communications in both long and short form through email marketing and social media; proactively leading, managing, and facilitating co-marketing programs; regularly ensuring the accuracy and integrity of member data; supporting and assisting potential individual members; execution of and primary liaison for invoicing and accounts receivable; and ensure corporate member and sponsor benefits are delivered accurately and on schedule.</p><br />
|-<br />
| style="vertical-align: top;" |[[Image:Staff_sibah.jpg|140 px|left]]<br />
| <h1>Sibah Poede</h1><br />'''Events Coordinator'''<br />U.K.<p>Organize logistical and administrative support for while coordinating with sales team to develop the strategy and direction of events. Collaborate with the marketing and design teams to facilitate event promotion. Support staff in managing budgets, calendars, and partnerships for event efforts. Collaborate with leaders, members, and partners to grow and evolve regional events.</p> <br />
|}<br />
<br />
==OWASP HR Resources==<br />
* [https://www.owasp.org/images/2/28/EmployeeHandbook2014.pdf OWASP Foundation Employee Handbook]<br />
* [https://docs.google.com/document/d/1ZWqUOcCYY40yBsdiSf9Y9oY4XLM8AR67VQu9aYN0syI/edit?usp=sharing Employee and Contractor Annual Review Process], [https://docs.google.com/document/d/1yjgy-G5vOvzKN7_vIksElEYtbTwm016SdckvLst_yxw/edit?usp=sharing Employee Self Review and Supervisor Review Form], [https://docs.google.com/document/d/1GsGf5WCsj-6-MVb-vyguiSku7v_XK5K4K6DxX9f2tOQ/edit?usp=sharing Employee Peer Review Form]<br />
*[https://www.owasp.org/index.php/Governance/Conflict_of_Interest_Policy OWASP Conflict of Interest Policy and Annual Questionnaire]<br />
*[https://www.owasp.org/index.php/Governance/Whistleblower_Policy OWASP Whistleblower & Anti-Retaliation Policy]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=OWASP_Merchandise&diff=256691OWASP Merchandise2021-01-22T13:59:29Z<p>Hblankenship: </p>
<hr />
<div>== How to Request OWASP Merchandise ==<br />
<br />
In response to so many requests for OWASP Gear, we have made arrangements with a vendor, Konik Company, for chapter leaders to purchase some items using their available chapter funds. Additionally, if you do not have chapter funds to cover your request, you request money through our [https://www.owasp.org/index.php/Funding community fund budget] to help pay for merchandise. <br />
<br />
<br />
* Quantity<br />
* Item(s) ordering<br />
* Complete shipping address (Name, address, city, state and zip code)<br />
* Invoice & credit card form will be emailed to you<br />
* Fax back credit card authorization form to the secure fax# <br />
* Accounting will process payment and send receipt<br />
* Package will then ship after payment verified<br />
* Tracking information will be emailed when package ships<br />
<br />
== OWASP Branded Merchandise for Purchase ==<br />
<br />
=== <big>Stickers</big> ===<br />
<br />
'''Got OWASP?''' Stickers, $0.15 each OUT OF STOCK<br />
<br><br />
[[Image:Got_OWASP_Sticker_Small.JPG]]<br />
<br />
=== <big>Pens</big> ===<br />
<br />
Gray OWASP Pens (Bic), $0.85 each<br />
<br />
[[Image: Merchandise_Pen_-_Edited.jpg]]<br />
<br />
=== <big>Rockets</big> ===<br />
<br />
'''Blue Foam Rockets''', $2.00 each<br />
<br />
[[Image: Merchandise_-_OWASP_Rocket.jpg]]<br />
<br />
=== <big>Stress Dudes</big> ===<br />
<br />
'''OWASP Stress Dudes''', $3.25<br />
<br />
[[Image:Stress_Dude.png]]<br />
<br />
=== <big>OUT OF STOCK Small Notepad</big> ===<br />
<br />
Blue Notepads with white OWASP logo, '''PEN NOT INCLUDED''' $2.25 each<br />
<br />
=== <big>Webcam Cover</big> ===<br />
<br />
Webcam Cover, $1.35 each<br />
<br />
[[Image: New_WebCam_cover.jpg]]<br />
<br />
===<big>Cornucopia Cards</big>===<br />
<br />
$12.00 each<br />
<br />
[[File:Cornucopia-square-logo-350.jpg]]<br />
<br />
=== <big>Elevation of Privilege Card Game</big> ===<br />
<br />
Elevation of Privilege Card Game, $12.00 each<br />
<br />
<br />
=== <big>Bee Beanies</big> ===<br />
<br />
'''Bee Beanies''', $7.00 each<br />
<br />
[[Image:Merchandise - Bee Beanies.jpg]]<br />
<br />
=== <big>Lanyards</big> ===<br />
<br />
OWASP Lanyards, $2.00 each<br />
<br />
[[Image:OWASPLanyard.jpg]]<br />
<br />
=== <big>OWASP Mug</big> ===<br />
<br />
OWASP Mug - Black Mug with Yellow OWASP logo, $4.75<br />
<br />
<br />
=== <big>Bags</big> ===<br />
<br />
'''OUT OF STOCK - OWASP Yellow Drawstring Backpack''', $2.15 each<br />
<br />
<br />
'''Messenger Bag''' - Black Attache Shoulder Bag with OWASP Logo, $32.00 each<br />
<br />
[[Image:Merchandise - OWASP Messenger Bag.jpg]]<br />
<br />
==='''Table Cover'''===<br />
<br />
'''Blue Tablecloth with white OWASP logo''', $190.00 each (29" x 72")<br />
<br />
[[Image: OWASP_Table_Cover_small.jpg]]<br />
<br />
=== <big>Backpack</big> ===<br />
<br />
'''Black & Yellow Backpack, $48.00 each'''<br />
<br />
[[Image: Tiny_backpack.jpg]]<br />
<br />
=== Ball Caps ===<br />
Black/yellow Baseball Hats, $14.50 each<br />
<br />
[[Image: OWASP_BallCap_sm.jpg]]<br />
<br />
===T-shirts===<br />
<br />
'''OWASP T-Shirt - Only Female sizes available''' <br />
<br />
Black t-shirt with white logos $14.00 each<br><br />
(small, medium, large, xlarge, and 2xlarge)<br />
<br />
[[Image: New OWASP T-Shirt.jpg]]<br />
|-<br />
<br />
==='''Banners'''===<br />
<br />
<br />
'''The Conference Banner''' - $325.00 estimate<br />
<br />
[[Image:Owasp ISM8 FINAL bluebanner 300px.png]]<br />
<br />
<br />
<br />
'''The Honeycomb Banner''' - $325.00 estimate<br />
<br />
[[Image:Banner-2.jpg|500px]]<br />
<br />
== OWASP Books ==<br />
Most OWASP Books can be downloaded for free at [http://stores.lulu.com/owasp Lulu's OWASP Storefront]. <br />
<br />
Printed copies of the OWASP Books are also available for purchase at [http://stores.lulu.com/owasp Lulu's OWASP Storefront]. If you would like to order books and have them billed to your local chapter or event, please [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 contact us].</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Local_Chapter_Supporter&diff=256689Local Chapter Supporter2020-02-09T13:58:24Z<p>Hblankenship: </p>
<hr />
<div>Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Chapter Supporter.<br><br />
<br />
<br />
<br />
'''Benefits'''<br><br />
Be recognized as a supporter by posting your company logo on the local OWASP chapter website (Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi). Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] for an additional benefits.<br />
<br />
<br />
Suggested levels (these levels/costs & benefits may vary per chapter) Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] to learn more about specific price levels and benefits for Chapter Supporters.<br><br />
<br />
*$500/USD &euro;420 - Silver Chapter Supporter<br><br />
*$1000/USD &euro;845 - Gold Chapter Supporter<br><br />
*$2000/USD &euro;1690 - Platinum Chapter Supporter<br><br> For donations in USD click here [https://owasp.org/donate | here]<br />
<br />
If you require an invoice or would like to pay via wire transfer, please let us know using our [https://contact.owasp.org contact us form.]<br />
<br />
[[Membership|Return to Membership]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=MediaWiki:Common.css&diff=256670MediaWiki:Common.css2020-01-28T15:00:26Z<p>Hblankenship: </p>
<hr />
<div>.hiddenStructure {display: none}<br />
<br />
.if {display: none}<br />
<br />
/*<br />
body.page-Main_Page div#siteNotice {<br />
display: none;<br />
}<br />
*/<br />
<br />
#pt-createaccount {<br />
display: none;<br />
}<br />
<br />
/* wikitable/prettytable class for skinning normal tables */<br />
<br />
table.wikitable,<br />
table.prettytable {<br />
margin: 1em 1em 1em 0;<br />
background: #f9f9f9;<br />
border: 1px #aaaaaa solid;<br />
border-collapse: collapse;<br />
}<br />
<br />
table.wikitable th, table.wikitable td,<br />
table.prettytable th, table.prettytable td {<br />
border: 1px #aaaaaa solid;<br />
padding: 0.2em;<br />
}<br />
<br />
table.wikitable th,<br />
table.prettytable th {<br />
background: #f2f2f2;<br />
text-align: center;<br />
}<br />
<br />
table.wikitable caption,<br />
table.prettytable caption {<br />
margin-left: inherit;<br />
margin-right: inherit;<br />
}<br />
<br />
.allpagesredirect {<br />
font-style: italic;<br />
}<br />
<br />
/* To make images responsive */<br />
.res-img img {<br />
max-width:100%;<br />
height:auto;<br />
}<br />
<br />
/* Infobox template style */<br />
<br />
.infobox {<br />
border: 1px solid #aaaaaa;<br />
background-color: #f9f9f9;<br />
color: black;<br />
margin-bottom: 0.5em;<br />
margin-left: 1em;<br />
padding: 0.2em;<br />
float: right;<br />
clear: right;<br />
}<br />
.infobox td,<br />
.infobox th {<br />
vertical-align: top;<br />
}<br />
.infobox caption {<br />
font-size: larger;<br />
margin-left: inherit;<br />
}<br />
.infobox.bordered {<br />
border-collapse: collapse;<br />
}<br />
.infobox.bordered td,<br />
.infobox.bordered th {<br />
border: 1px solid #aaaaaa;<br />
}<br />
.infobox.bordered .borderless td,<br />
.infobox.bordered .borderless th {<br />
border: 0;<br />
}<br />
<br />
.infobox.sisterproject {<br />
width: 20em;<br />
font-size: 90%;<br />
}<br />
<br />
table.collapsed tr.collapsible {<br />
display: none;<br />
}<br />
<br />
.collapseButton { /* 'show'/'hide' buttons created dynamically by the */<br />
float: right; /* CollapsibleTables JavaScript in [[MediaWiki:Common.js]] */<br />
font-weight: normal; /* are styled here so they can be customised. */<br />
text-align: right;<br />
width: auto;<br />
<br />
}<br />
<br />
/* Default styling for Navbar template */<br />
.navbar {<br />
display: inline;<br />
font-size: 88%;<br />
font-weight: normal;<br />
}<br />
.navbar ul {<br />
display: inline;<br />
white-space: nowrap;<br />
}<br />
.navbar li {<br />
word-spacing: -0.125em;<br />
}<br />
/* Navbar styling when nested in navbox */<br />
.navbox .navbar {<br />
display: block;<br />
font-size: 100%;<br />
}<br />
.navbox-title .navbar {<br />
/* @noflip */<br />
float: left;<br />
/* @noflip */<br />
text-align: left;<br />
/* @noflip */<br />
margin-right: 0.5em;<br />
width: 6em;<br />
}<br />
<br />
/* Default style for navigation boxes */<br />
.navbox { /* Navbox container style */<br />
border: 1px solid #aaa;<br />
width: 100%; <br />
margin: auto;<br />
clear: both;<br />
font-size: 88%;<br />
text-align: center;<br />
padding: 1px;<br />
}<br />
.navbox-inner,<br />
.navbox-subgroup {<br />
width: 100%;<br />
}<br />
.navbox th,<br />
.navbox-title,<br />
.navbox-abovebelow {<br />
text-align: center; /* Title and above/below styles */<br />
padding-left: 1em;<br />
padding-right: 1em;<br />
}<br />
th.navbox-group { /* Group style */<br />
white-space: nowrap;<br />
/* @noflip */<br />
text-align: right;<br />
}<br />
.navbox,<br />
.navbox-subgroup {<br />
background: #fdfdfd; /* Background color */<br />
}<br />
.navbox-list {<br />
border-color: #fdfdfd; /* Must match background color */<br />
}<br />
.navbox th,<br />
.navbox-title {<br />
background: #ccccff; /* Level 1 color */<br />
}<br />
.navbox-abovebelow,<br />
th.navbox-group,<br />
.navbox-subgroup .navbox-title {<br />
background: #ddddff; /* Level 2 color */<br />
}<br />
.navbox-subgroup .navbox-group,<br />
.navbox-subgroup .navbox-abovebelow {<br />
background: #e6e6ff; /* Level 3 color */<br />
}<br />
.navbox-even {<br />
background: #f7f7f7; /* Even row striping */<br />
}<br />
.navbox-odd {<br />
background: transparent; /* Odd row striping */<br />
}<br />
table.navbox + table.navbox { /* Single pixel border between adjacent navboxes */<br />
margin-top: -1px; /* (doesn't work for IE6, but that's okay) */<br />
}<br />
.navbox .hlist td dl,<br />
.navbox .hlist td ol,<br />
.navbox .hlist td ul,<br />
.navbox td.hlist dl,<br />
.navbox td.hlist ol,<br />
.navbox td.hlist ul {<br />
padding: 0.125em 0; /* Adjust hlist padding in navboxes */<br />
}<br />
.navbox .hlist dd,<br />
.navbox .hlist dt,<br />
.navbox .hlist li {<br />
white-space: nowrap; /* Nowrap list items in navboxes */<br />
white-space: normal !ie; /* IE < 8 no-wraps entire list, so disable it */<br />
}<br />
.navbox .hlist dd dl,<br />
.navbox .hlist dt dl,<br />
.navbox .hlist li ol,<br />
.navbox .hlist li ul {<br />
white-space: normal; /* But allow parent list items to be wrapped */<br />
}<br />
ol + table.navbox,<br />
ul + table.navbox {<br />
margin-top: 0.5em; /* Prevent lists from clinging to navboxes */<br />
}<br />
<br />
body.page-Main_Page h1.firstHeading { display:none; } /* Hide heading on home page for title */<br />
body.page-Main_Page #p-actions { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-talk { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-view { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-edit { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-history { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #p-cactions { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-nstab-main { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-viewsource { display: none !important; } /* Hide distracting tab button on home page */<br />
<br />
/* CATEGORY LINK START<br />
* Created by http://mediawiki.org/User:Kyle_van_der_meer<br />
* Used for Version 2 for non-table layout.<br />
*/<br />
.category_link{<br />
v-align:top;<br />
display:inline-block; <br />
width:144px; /*Default width part 2*/<br />
}<br />
<br />
.category_link a{<br />
border:1px solid #333; /*Default dark color*/<br />
color:#fff; /*Default Light color*/<br />
background-color:#333; /*Default dark color*/<br />
padding:2px;<br />
line-height:1;<br />
display:block;<br />
}<br />
<br />
.category_link a:hover{<br />
border:1px solid #333; /*Default dark color*/<br />
color:#333; /*Default dark color*/<br />
background-color:#eee; /*Default light color*/<br />
}<br />
/*CATEGORY LINK END*/<br />
<br />
/**<br />
* Improving the wiki with better navigation, this is used for navigation boxes at the end of a page.<br />
* By user:ElgerStitch, see template:navigationBoxBegin for documentation and examples.<br />
*/<br />
.navigationBox {<br />
border: 1px solid silver;<br />
margin: 10px;<br />
width: 100%;<br />
font-size: 12px;<br />
}<br />
<br />
.navigationBox .header {<br />
font-size: 14px;<br />
text-align: center;<br />
background-color: #E0E9E9;<br />
padding: 2px;<br />
border-bottom: 1px solid #DDDDD;<br />
}<br />
<br />
.navigationBox .header .left {<br />
float: left;<br />
font-size:10px;<br />
margin-left: 5px;<br />
margin-top: 3px;<br />
}<br />
<br />
.navigationBox .header .right {<br />
float: right;<br />
font-size: 10px;<br />
margin-right: 5px;<br />
margin-top: 3px;<br />
}<br />
<br />
.navigationBox .category {<br />
background-color: #EDF2F2;<br />
width: 129px;<br />
text-align: right;<br />
padding-right: 8px;<br />
}<br />
<br />
.navigationBox tr:nth-child(odd) {<br />
background-color: #F4F7F7;<br />
}<br />
<br />
.navigationBox .neighbors {<br />
border-top: 1px solid silver;<br />
text-align: center;<br />
background-color: #F4F7F7; padding: 2px;<br />
}<br />
<br />
.navigationBox li {<br />
display: inline-block;<br />
margin:0;<br />
}<br />
<br />
.navigationBox li:after {<br />
content: " · ";<br />
font-weight: bold;<br />
margin-left: 5px;<br />
margin-right: 5px;<br />
}<br />
<br />
.navigationBox li:last-child:after {<br />
content: none;<br />
}<br />
<br />
.navigationBox ul {<br />
margin: 2px; padding: 0px;<br />
}<br />
<br />
.navigationBox .header abbr a {<br />
background: none !important;<br />
padding: 0 !important;<br />
color: #002bb8 !important;<br />
}<br />
<br />
.navigationBox .mw-collapsible-toggle {<br />
font-size: 10px;<br />
margin-right: 3px;<br />
margin-top: 2px;<br />
}<br />
/** <br />
* End navigation box. <br />
*/<br />
<br />
<br />
<br />
/**<br />
* Submitted by Lachlan Barclay<br />
* http://lachlanbarclay.net/2016/01/fixing-owasps-css<br />
*/<br />
<br />
/* For code examples, make any long text add a scrollbar to the code sample, not the whole window */<br />
pre { overflow-x: auto; }<br />
<br />
/* For any text that isn't broken up by a space, force it to wrap if it's too long */<br />
body { word-wrap: break-word; }<br />
<br />
/* For smaller width screens (less than 768px) */<br />
@media (max-width: 767px){<br />
<br />
/* Move the left navigation panel so it's below the content */<br />
#mw-panel { position: static !important; }<br />
<br />
/* Get rid of the margins for the content as there's no left nav now */<br />
#left-navigation,#footer,#content { margin-left: 0 !important; }<br />
<br />
/* Fix the navigation to that it fits properly on the screen */<br />
#left-navigation, #right-navigation { float: none; }<br />
<br />
/* Move the search bar to float to the right */<br />
#p-search { float: right !important; }<br />
<br />
/* Make the search input box a bit smaller so it fits */<br />
div#simpleSearch { width: 8em; }<br />
<br />
/* two fixes for mobilized nav from FEB 10 2016 */<br />
/* #mw-panel li { display: inline; } */<br />
/* #mw-panel {width: 100% !important;} */<br />
}<br />
/** <br />
* End CSS by Lachlan<br />
*/</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Membership&diff=256669Membership2020-01-28T14:58:39Z<p>Hblankenship: </p>
<hr />
<div><br />
= Home =<br />
<br />
[[File:MEMBERSHIP BANNER.jpg|link=]]<br />
<br />
Software powers the world, but insecure software threatens safety, trust, and economic growth. The Open Web Application Security Project (OWASP) is dedicated to making application security visible by empowering individuals and organizations to make informed decisions about true application security risks.<br />
<br />
OWASP boasts 46,000+ participants, more than 65 organizational supporters, and even more academic supporters.<br />
<br />
As a 501(c)(3) not-for-profit worldwide charitable organization, OWASP does not endorse or recommend commercial products or services. Instead, we allow our community to remain vendor neutral with the collective wisdom of the best individual minds in application security worldwide. This simple rule is the key to our success since 2001.<br />
<br />
<b>Your individual and corporate membership powers the organization and helps us [https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project serve the mission]. Please consider becoming an OWASP member today!</b><br /><br /><br />
<br />
[[Image:Join.png|link=https://owasp.org/membership]] <br />
<br />
'''Questions about OWASP Membership?''' [[MEMBERSHIP FAQ]] <br />
<br />
'''Care to see our global membership demographics?''' [https://docs.google.com/spreadsheets/d/1jG1ad1s6pEbBjsGkftCB_2dU70n6GajRe4CYLGFwkM8/edit?usp=sharing Membership Demographics as of January 2017]<br />
<br />
== Corporate Membership ==<br />
<br />
To find out more about our Corporate Membership options and how to become a Corporate Member, please visit our [https://www.owasp.org/index.php/Corporate_Membership Corporate Membership] page.<br />
<br />
Visit our [https://www.owasp.org/index.php/Acknowledgements Acknowledgement] page to view the companies who already have chosen to support OWASP as a Corporate Member. <br />
<br />
== Individual Membership ==<br />
Individual Members support OWASP at the $50/USD level annually. We also offer a 2 year membership for $95/USD and a Lifetime membership for $500/USD.<br /><br />
To find out more about Individual Membership, please visit the [[Individual Member]] page.<br />
<br />
== Student Membership ==<br />
Students may join OWASP at a special discounted student rate. If you are a student and are interested in joining OWASP, please visit our [https://www.owasp.org/index.php/Student_Membership Student Membership page]<br />
<br />
==Honorary Membership==<br />
If you are an OWASP leader that would like an Honorary Membership and does not have a paid individual membership on file but meets the requirements for Honorary Membership, then you MUST APPLY for an Honorary Membership. Submissions will be reviewed and verified by OWASP. (standard format is firstname.lastname@owaso.org)<br />
To learn more about Honorary Membership, please visit our [https://www.owasp.org/index.php/Honorary_Membership Honorary Membership page]<br />
<br />
= Other ways to Support OWASP =<br />
<br />
{| border="1" cellpadding="2"<br />
! scope="col" width="250" | [[Image:Btn_donate_SM.gif|link=https://www.owasp.org/index.php/Donate]]<br />
! scope="col" width="700" | OWASP is an Open community of Application Security Professionals. The opportunities to participate in the organization are limitless<br />
|-<br />
| align="center" |[[Academic Supporter]]|| [http://www.tfaforms.com/338407 Application]<br />
|-<br />
| align="center" |[[Local Chapter Supporter]]|| Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Local Chapter Supporter. Check with your local Chapter Leader to learn more about specific price levels for Chapter Supporters. The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.[https://www.owasp.org/index.php/Category:OWASP_Chapter#Local_Chapters local chapter page] <br />
|-<br />
| align="center" |[[Single Meeting Supporter]]||Organizations that wish to support an OWASP local chapter with a 100% tax deductible donation to enable OWASP Foundation to continue the mission. The fees are set by the local chapter, so contact the chapter leader of the chapter that you want to work with. [https://www.owasp.org/index.php/Category:OWASP_Chapter#Local_Chapters local chapter page] <br />
|-<br />
| align="center" |[https://www.owasp.org/index.php/Category:OWASP_AppSec_Conference Event Sponsorship]||Participate in one of our Global, Local or Regional events by sponsoring the event or providing tangibles to the conference attendees. View [https://www.owasp.org/index.php/Category:OWASP_AppSec_Conference OWASP Events]<br />
|-<br />
| align="center" |OWASP Foundation Donation||The OWASP Foundation is a registered 501(c)3 in the US as well as a Not for Profit entity in Europe. As a result, your direct donation is eligible to be deducted as a charitable donation. Please contact your tax advisor for complete information. [https://www.owasp.org/index.php/Donate Donate Here]<br />
|-<br />
| align="center" |Individual Participation||With over 200 active chapters globally and hundreds of OWASP Projects and millions of great ideas waiting to become projects, it would be difficult to NOT find a way to participate. All it takes to participate is a willingness to share ideas and collaborate with the key minds in the industry. Please reach out to your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] leader, a current [https://www.owasp.org/index.php/Category:OWASP_Project project] leader, or start your own! <br />
|-<br />
| align="center" |[https://www.owasp.org/index.php/Project_Sponsorship_Operational_Guidelines Project Contribution] or [https://www.owasp.org/index.php/Donate Donation]||With over 100 active projects globally and hundreds of OWASP Project roles to contribute to, it would be difficult to NOT find a way to participate within the OWASP Projects Division. All it takes to participate is a willingness to share ideas and collaborate with the key minds in the industry. Please click on the Donate link above to share funds, or visit the [http://owasp.force.com/volunteers/GW_Volunteers__VolunteersJobListing OWASP Initiatives page] to find out how you can contribute to one of our OWASP Projects. <br />
|-<br />
| align="center" | Partnership Co-Marketing Agreement || [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/19 Contact us] to learn more<br />
<br />
|}<br />
<br />
= Additional Resources =<br />
<br />
NEW MEMBERSHIP FLYER VERSION COMING SOON<br />
<br />
= Testimonials =<br />
<br />
''“At a time when malicious attacks are intensifying and organizations increasingly rely on applications with known and vulnerabilities to fulfill their missions, OWASP is a vital part of defending the integrity of businesses and institutions. We need strong DevOps and AppSec communities to ensure the safety and security of commerce. We’re proud to help OWASP fulfill that role.”''<br><br />
'''Brian Maccaba, CEO, Waratek'''<br />
<br><br />
<br><br />
''“Johnson Controls has been an innovator in the building and energy efficiency industry since Warren Johnson’s invention of the electric room thermostat over a century ago. With the functionality and efficiency that technology has brought to building controls devices the need for software security in embedded controls and the IoT is more apparent than ever. Johnson Controls leverages several OWASP projects to include the OWASP Top Ten and the Application Security Verification Standard (ASVS) and others. Partnering with OWASP is a logical step given our shared commitment to software security.”''<br><br />
'''Jason R. Rosselot, Director Global Product Security (GPS), Johnson Controls''' <br />
<br><br />
<br><br />
''"The OWASP resources and tools have been instrumental in getting our company going. We want to support the ongoing work."''<br> <br />
'''Jacob Hansen, Cobalt.io'''<br />
<br><br />
<br><br />
''“We want to give back to the organization which has given the security community at large so much. It's important that the OWASP mission continue, and we wish to be a part of it.”''<br> <br />
'''Kiran Sharma, Application Security Program –Lead, FICO'''<br />
<br><br />
<br><br />
“''OWASP’s AppSec events are one of the world’s most professional events, gathering a top application security managerial and technical audience. Ever since its foundation, Checkmarx has been supporting OWASP and has enjoyed working closely with a hardworking, devoted and professional team.''” <br> '''Asaph Schulman, VP Marketing at Checkmarx'''<br />
<br><br />
<br />
__NOTOC__<br />
<br />
<headertabs></headertabs></div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Main_Page&diff=256668Main Page2020-01-23T13:51:01Z<p>Hblankenship: </p>
<hr />
<div><div style="float:left;width:50%;"><br />
<iflanguage is="en"><br />
<div style="font-weight:bold;font-size:162%;border:none;margin: 0;color:#000">'''[[About The Open Web Application Security Project|OWASP&trade; Foundation]]'''</div><div style="top:+0.2em;font-size: 95%">the free and open software security community</div><br />
</iflanguage><br />
<iflanguage is="es"><br />
<div style="font-weight:bold;font-size:162%;border:none;margin: 0;color:#000">'''[[About The Open Web Application Security Project/es|The OWASP Foundation]]'''</div><div style="top:+0.2em;font-size: 95%">la comunidad libre y abierta sobre seguridad en aplicaciones</div><br />
</iflanguage><br />
</div><br />
<br />
<div style="float:right;"><br />
[[Image:OWASP_Donations_Banner.jpg|300px|link=https://owasp.org/donate]]<br /><br />
</div><br />
<!--<div style="width:100%;border-top:1px solid;border-bottom:1px solid;">[[Image:Coverphoto(2).png|1000px|center]]</div>--><br />
<center><br />
{| style="width:100%;background:none;"<br />
| style="font-size:95%;text-align:left;color:#000" |[https://myowasp.force.com Member Portal] '''·''' [[About The Open Web Application Security Project|About]] '''·''' [[Searching|Searching]] '''·''' [[Tutorial|Editing]] '''·''' [[How to add a new article|New Article]] '''·''' [[OWASP Categories]] '''·''' [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contact Us]<br />
| style="font-size:95%;padding:10px 0;margin:0px;text-align:right;color:#000" | [[Special:Statistics|Statistics]] '''·''' [https://www.owasp.org/index.php?title=Special:Recentchanges&limit=100&hidebots=0 Recent Changes]<br />
|}<br />
</center><br />
<hr /><br />
<!-- BANNER IMAGE --><br />
<!-- Save it for next time <div style="width:80%;height:auto;"><br />
<div><h2>JOIN US AT GLOBAL APPSEC AMSTERDAM 2019!</h2></div> <br />
<div class="res-img">[[File:GlobalAppSecAMS1200x600.png | link=#]] <br />
</div><br />
<div style="position:absolute;left:15%;margin-top:-8%;text-align:center;">[https://www.regonline.com/registration/Checkin.aspx?EventId=2568596<span style="color:white;font-size:2em;font-weight:bold;">Register Here</span>]</div><br />
</div>--><br />
<!-- Main Content --><br />
{| style="width:100%;border-spacing:8px;margin:0px -8px"<br />
<br />
<!-- Start of left-column --><br />
| class="MainPageBG" style="width:50%;border:1px solid #cedff2;background-color:#f5faff;vertical-align:top" |{{Main Left Panel}}<br />
<br />
<!-- Start of right-column --><br />
| class="MainPageBG" style="width:30%;border:1px solid #cedff2;background-color:#f5faff;vertical-align:top" |{{Main Right Panel}}<br />
<br />
<!-- End of Main Content --><br />
|}<br />
<br />
__NOTOC__ __NOEDITSECTION__<br />
__INDEX__</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Main_Page&diff=256667Main Page2020-01-23T13:48:49Z<p>Hblankenship: </p>
<hr />
<div><div style="float:left;width:50%;"><br />
<iflanguage is="en"><br />
<div style="font-weight:bold;font-size:162%;border:none;margin: 0;color:#000">'''[[About The Open Web Application Security Project|OWASP&trade; Foundation]]'''</div><div style="top:+0.2em;font-size: 95%">the free and open software security community</div><br />
</iflanguage><br />
<iflanguage is="es"><br />
<div style="font-weight:bold;font-size:162%;border:none;margin: 0;color:#000">'''[[About The Open Web Application Security Project/es|The OWASP Foundation]]'''</div><div style="top:+0.2em;font-size: 95%">la comunidad libre y abierta sobre seguridad en aplicaciones</div><br />
</iflanguage><br />
</div><br />
<br />
<!--<div style="width:100%;border-top:1px solid;border-bottom:1px solid;">[[Image:Coverphoto(2).png|1000px|center]]</div>--><br />
<center><br />
{| style="width:100%;background:none;"<br />
| style="font-size:95%;text-align:left;color:#000" |[https://myowasp.force.com Member Portal] '''·''' [[About The Open Web Application Security Project|About]] '''·''' [[Searching|Searching]] '''·''' [[Tutorial|Editing]] '''·''' [[How to add a new article|New Article]] '''·''' [[OWASP Categories]] '''·''' [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contact Us]<br />
| style="font-size:95%;padding:10px 0;margin:0px;text-align:right;color:#000" | [[Special:Statistics|Statistics]] '''·''' [https://www.owasp.org/index.php?title=Special:Recentchanges&limit=100&hidebots=0 Recent Changes]<br />
|}<br />
</center><br />
<hr /><br />
<!-- BANNER IMAGE --><br />
<!-- Save it for next time <div style="width:80%;height:auto;"><br />
<div><h2>JOIN US AT GLOBAL APPSEC AMSTERDAM 2019!</h2></div> <br />
<div class="res-img">[[File:GlobalAppSecAMS1200x600.png | link=#]] <br />
</div><br />
<div style="position:absolute;left:15%;margin-top:-8%;text-align:center;">[https://www.regonline.com/registration/Checkin.aspx?EventId=2568596<span style="color:white;font-size:2em;font-weight:bold;">Register Here</span>]</div><br />
</div>--><br />
<!-- Main Content --><br />
{| style="width:100%;border-spacing:8px;margin:0px -8px"<br />
<br />
<!-- Start of left-column --><br />
| class="MainPageBG" style="width:50%;border:1px solid #cedff2;background-color:#f5faff;vertical-align:top" |{{Main Left Panel}}<br />
<br />
<!-- Start of right-column --><br />
| class="MainPageBG" style="width:30%;border:1px solid #cedff2;background-color:#f5faff;vertical-align:top" |{{Main Right Panel}}<br />
<br />
<!-- End of Main Content --><br />
|}<br />
<br />
__NOTOC__ __NOEDITSECTION__<br />
__INDEX__</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Donate&diff=256666Donate2020-01-23T13:47:36Z<p>Hblankenship: </p>
<hr />
<div>[[Image:OWASP_Donations_Banner.jpg]]<br />
<br />
__NOTOC__<br />
===Donations===<br />
Please visit our new website to make a [https://owasp.org/donate donation].<br />
<br><br />
===Supporting & Sponsoring a Local Chapter or Project===<br />
<br />
Please visit our '''Other Ways To Support OWASP''' [https://www.owasp.org/index.php/Membership#tab=Other_ways_to_Support_OWASP page] to process your contribution. <br />
<br />
===Donate via Check===<br />
<br />
You can also donate by sending a check or money order payable to "OWASP Foundation" directly to the address below. Please indicate "Donation to the Foundation" in the memo section of your payment method. <br />
<br />
'''OWASP Foundation'''<br />
401 Edgewater Place, Suite 600<br />
Wakefield, MA 01880 U.S.A.<br />
<br />
Please include the name under which you wish the donation to be credited, either your own or the third-party if it is a gift on behalf of someone else, and an e-mail address to which we can acknowledge receipt. This information will not be used for any other purpose. A receipt may be requested for any donations grater than US$100, provided a return address is included. <br />
<br />
==Third Party Sites Authorized to Accept OWASP Donations==<br />
<br />
* [http://smile.amazon.com/ch/20-0963503 Amazon Smile]<br />
<br />
* [https://www.yourcause.com/charities.aspx?CharityID=263427 Your Cause]<br />
<br />
<br />
==Company Matching Programs==<br />
<br />
Tax ID and other information can be found here: [https://www.owasp.org/index.php/About_OWASP/Financial_Transparency Financial Transparency]<br />
<br />
TBA<br />
<br><br />
<br><br />
<br />
==Frequently Asked Questions about Contributing to The OWASP Foundation==<br />
<br />
'''Why should I donate?'''<br />
<br />
As a volunteer-based organization, the OWASP Foundation stands in need of dedicated volunteers who can work on software, documentation, or administrative issues within each of the OWASP projects as well as other Foundation initiatives. OWASP provides the infrastructure for the community - the mailing lists, code repositories, bug tracking systems, etc. <br />
If you use our platform, please consider donating so that we can continue to spread our mission throughout the world.<br />
<br />
'''Is there a cost to participate?'''<br />
<br />
Absolutely not! The OWASP Foundation is committed to providing free access to all interested participants. All of our code is distributed under the OSI-approved licenses. The project mailing lists are all open to the public and participation is encouraged. So, there is no cost required to contribute to the projects. However, there is usually a substantial time commitment that is required in order to contribute to a project.<br />
<br />
'''Create a new project'''<br />
<br />
The OWASP Foundation is also looking for new or existing documentation or software projects related to application security that are in need of a home. If you are in a position to contribute documentation that could help other organizations, or software you have developed, we may be able to provide a home for it. Understand that this would mean assigning the OWASP Foundation rights to modify and distribute your work and offer it under a FLOSS license. See the Contributor Licensing Agreement for more details. Please contact support@owasp.org for more details about starting new projects in the OWASP.<br />
<br />
'''If I donate financially, where would my donations go?'''<br />
<br />
If you'd like to contribute financially to the foundation, we would greatly appreciate it. Currently, less than 1% of our annual revenue comes from donations and in order to build a more sustainable business model, ensuring the ongoing success of the Foundation we would like to increase the number of donors and donations.<br />
<br />
As the chart below shows, in 2013 nearly 60% of our expenses were related to conferences and events (correlating to the bulk of our revenue as well). Our conferences are relatively self sustaining though, so donations go to support the rest of the operations (the staff) and programs of the Foundation including project management, mission outreach, and local chapter support. I you would like to earmark, your donation to a particular program or area of the Foundation's operations, please let us know and we will do our best to honor that intent. Otherwise, we will put your donation toward the area where it is needed most at the time of your donation. If you wish to provide equipment for use by the Foundation, please contact us before attempting to send it "here" directly.<br />
<br />
[[Image:2013_OWASP_Revenue.png|700px]] [[Image:2013_OWASP_Expenses.png|600px]]<br />
<br />
'''The OWASP Foundation is a non-profit organization'''<br />
<br />
The OWASP Foundation is a private operating foundation that is registered as a non-profit, charitable organization under Section 501(c)(3) of the U.S. Internal Revenue Code. This means that, for individuals within the U.S., donations to the OWASP should be tax-deductible. We are not accountants, so this cannot be trusted as financial advice of any kind, but hopefully this description will be useful to those who advise you in these matters.<br />
<br />
'''I'd like to talk to someone about supporting the OWASP!'''<br />
<br />
If you would like more information about supporting the OWASP, please [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 contact us] for more information. All information will be kept in strictest confidence.<br />
<br />
<br />
[[About_OWASP]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=MediaWiki:Sidebar&diff=256665MediaWiki:Sidebar2020-01-19T00:35:05Z<p>Hblankenship: </p>
<hr />
<div>* Navigation<br />
** mainpage|Home<br />
** About_The_Open_Web_Application_Security_Project|About OWASP<br />
** Acknowledgements|Acknowledgements<br />
** Advertising|Advertising<br />
** http://stores.lulu.com/owasp|Books<br />
** Marketing/Resources|Brand Resources<br />
** Careers|Careers<br />
** OWASP_Chapter|Chapters<br />
** :Category:OWASP Download|Downloads<br />
** OWASP_Events/upcoming_events|Events<br />
** Funding|Funding<br />
** Governance|Governance<br />
** OWASP_Initiatives_Global_Strategic_Focus|Initiatives<br />
** https://groups.google.com/a/owasp.org/forum/#!overview|Mailing Lists<br />
** OWASP_Merchandise | Merchandise<br />
** :Category:OWASP Presentations|Presentations<br />
** Press|Press<br />
** :Category:OWASP Project|Projects<br />
** Supporting_Partners|Supporting Partners<br />
** :Category:OWASP Video|Video<br />
* Reference<br />
** :Category:Activity|Activities<br />
** :Category:Attack|Attacks<br />
** :Category:Code Snippet|Code Snippets<br />
** :Category:Control|Controls<br />
** :Category:Glossary|Glossary<br />
** :Category:How To|How To...<br />
** :Category:OWASP Java Project|Java Project<br />
** :Category:OWASP_.NET_Project|.NET Project<br />
** :Category:Principle|Principles<br />
** :Category:Technology|Technologies<br />
** :Category:Threat Agent|Threat Agents<br />
** :Category:Vulnerability|Vulnerabilities</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=MediaWiki:Common.css&diff=256653MediaWiki:Common.css2020-01-16T21:19:57Z<p>Hblankenship: </p>
<hr />
<div>.hiddenStructure {display: none}<br />
<br />
.if {display: none}<br />
<br />
/*<br />
body.page-Main_Page div#siteNotice {<br />
display: none;<br />
}<br />
*/<br />
<br />
<br />
/* wikitable/prettytable class for skinning normal tables */<br />
<br />
table.wikitable,<br />
table.prettytable {<br />
margin: 1em 1em 1em 0;<br />
background: #f9f9f9;<br />
border: 1px #aaaaaa solid;<br />
border-collapse: collapse;<br />
}<br />
<br />
table.wikitable th, table.wikitable td,<br />
table.prettytable th, table.prettytable td {<br />
border: 1px #aaaaaa solid;<br />
padding: 0.2em;<br />
}<br />
<br />
table.wikitable th,<br />
table.prettytable th {<br />
background: #f2f2f2;<br />
text-align: center;<br />
}<br />
<br />
table.wikitable caption,<br />
table.prettytable caption {<br />
margin-left: inherit;<br />
margin-right: inherit;<br />
}<br />
<br />
.allpagesredirect {<br />
font-style: italic;<br />
}<br />
<br />
/* To make images responsive */<br />
.res-img img {<br />
max-width:100%;<br />
height:auto;<br />
}<br />
<br />
/* Infobox template style */<br />
<br />
.infobox {<br />
border: 1px solid #aaaaaa;<br />
background-color: #f9f9f9;<br />
color: black;<br />
margin-bottom: 0.5em;<br />
margin-left: 1em;<br />
padding: 0.2em;<br />
float: right;<br />
clear: right;<br />
}<br />
.infobox td,<br />
.infobox th {<br />
vertical-align: top;<br />
}<br />
.infobox caption {<br />
font-size: larger;<br />
margin-left: inherit;<br />
}<br />
.infobox.bordered {<br />
border-collapse: collapse;<br />
}<br />
.infobox.bordered td,<br />
.infobox.bordered th {<br />
border: 1px solid #aaaaaa;<br />
}<br />
.infobox.bordered .borderless td,<br />
.infobox.bordered .borderless th {<br />
border: 0;<br />
}<br />
<br />
.infobox.sisterproject {<br />
width: 20em;<br />
font-size: 90%;<br />
}<br />
<br />
table.collapsed tr.collapsible {<br />
display: none;<br />
}<br />
<br />
.collapseButton { /* 'show'/'hide' buttons created dynamically by the */<br />
float: right; /* CollapsibleTables JavaScript in [[MediaWiki:Common.js]] */<br />
font-weight: normal; /* are styled here so they can be customised. */<br />
text-align: right;<br />
width: auto;<br />
<br />
}<br />
<br />
/* Default styling for Navbar template */<br />
.navbar {<br />
display: inline;<br />
font-size: 88%;<br />
font-weight: normal;<br />
}<br />
.navbar ul {<br />
display: inline;<br />
white-space: nowrap;<br />
}<br />
.navbar li {<br />
word-spacing: -0.125em;<br />
}<br />
/* Navbar styling when nested in navbox */<br />
.navbox .navbar {<br />
display: block;<br />
font-size: 100%;<br />
}<br />
.navbox-title .navbar {<br />
/* @noflip */<br />
float: left;<br />
/* @noflip */<br />
text-align: left;<br />
/* @noflip */<br />
margin-right: 0.5em;<br />
width: 6em;<br />
}<br />
<br />
/* Default style for navigation boxes */<br />
.navbox { /* Navbox container style */<br />
border: 1px solid #aaa;<br />
width: 100%; <br />
margin: auto;<br />
clear: both;<br />
font-size: 88%;<br />
text-align: center;<br />
padding: 1px;<br />
}<br />
.navbox-inner,<br />
.navbox-subgroup {<br />
width: 100%;<br />
}<br />
.navbox th,<br />
.navbox-title,<br />
.navbox-abovebelow {<br />
text-align: center; /* Title and above/below styles */<br />
padding-left: 1em;<br />
padding-right: 1em;<br />
}<br />
th.navbox-group { /* Group style */<br />
white-space: nowrap;<br />
/* @noflip */<br />
text-align: right;<br />
}<br />
.navbox,<br />
.navbox-subgroup {<br />
background: #fdfdfd; /* Background color */<br />
}<br />
.navbox-list {<br />
border-color: #fdfdfd; /* Must match background color */<br />
}<br />
.navbox th,<br />
.navbox-title {<br />
background: #ccccff; /* Level 1 color */<br />
}<br />
.navbox-abovebelow,<br />
th.navbox-group,<br />
.navbox-subgroup .navbox-title {<br />
background: #ddddff; /* Level 2 color */<br />
}<br />
.navbox-subgroup .navbox-group,<br />
.navbox-subgroup .navbox-abovebelow {<br />
background: #e6e6ff; /* Level 3 color */<br />
}<br />
.navbox-even {<br />
background: #f7f7f7; /* Even row striping */<br />
}<br />
.navbox-odd {<br />
background: transparent; /* Odd row striping */<br />
}<br />
table.navbox + table.navbox { /* Single pixel border between adjacent navboxes */<br />
margin-top: -1px; /* (doesn't work for IE6, but that's okay) */<br />
}<br />
.navbox .hlist td dl,<br />
.navbox .hlist td ol,<br />
.navbox .hlist td ul,<br />
.navbox td.hlist dl,<br />
.navbox td.hlist ol,<br />
.navbox td.hlist ul {<br />
padding: 0.125em 0; /* Adjust hlist padding in navboxes */<br />
}<br />
.navbox .hlist dd,<br />
.navbox .hlist dt,<br />
.navbox .hlist li {<br />
white-space: nowrap; /* Nowrap list items in navboxes */<br />
white-space: normal !ie; /* IE < 8 no-wraps entire list, so disable it */<br />
}<br />
.navbox .hlist dd dl,<br />
.navbox .hlist dt dl,<br />
.navbox .hlist li ol,<br />
.navbox .hlist li ul {<br />
white-space: normal; /* But allow parent list items to be wrapped */<br />
}<br />
ol + table.navbox,<br />
ul + table.navbox {<br />
margin-top: 0.5em; /* Prevent lists from clinging to navboxes */<br />
}<br />
<br />
body.page-Main_Page h1.firstHeading { display:none; } /* Hide heading on home page for title */<br />
body.page-Main_Page #p-actions { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-talk { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-view { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-edit { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-history { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #p-cactions { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-nstab-main { display: none !important; } /* Hide distracting tab button on home page */<br />
body.page-Main_Page #ca-viewsource { display: none !important; } /* Hide distracting tab button on home page */<br />
<br />
/* CATEGORY LINK START<br />
* Created by http://mediawiki.org/User:Kyle_van_der_meer<br />
* Used for Version 2 for non-table layout.<br />
*/<br />
.category_link{<br />
v-align:top;<br />
display:inline-block; <br />
width:144px; /*Default width part 2*/<br />
}<br />
<br />
.category_link a{<br />
border:1px solid #333; /*Default dark color*/<br />
color:#fff; /*Default Light color*/<br />
background-color:#333; /*Default dark color*/<br />
padding:2px;<br />
line-height:1;<br />
display:block;<br />
}<br />
<br />
.category_link a:hover{<br />
border:1px solid #333; /*Default dark color*/<br />
color:#333; /*Default dark color*/<br />
background-color:#eee; /*Default light color*/<br />
}<br />
/*CATEGORY LINK END*/<br />
<br />
/**<br />
* Improving the wiki with better navigation, this is used for navigation boxes at the end of a page.<br />
* By user:ElgerStitch, see template:navigationBoxBegin for documentation and examples.<br />
*/<br />
.navigationBox {<br />
border: 1px solid silver;<br />
margin: 10px;<br />
width: 100%;<br />
font-size: 12px;<br />
}<br />
<br />
.navigationBox .header {<br />
font-size: 14px;<br />
text-align: center;<br />
background-color: #E0E9E9;<br />
padding: 2px;<br />
border-bottom: 1px solid #DDDDD;<br />
}<br />
<br />
.navigationBox .header .left {<br />
float: left;<br />
font-size:10px;<br />
margin-left: 5px;<br />
margin-top: 3px;<br />
}<br />
<br />
.navigationBox .header .right {<br />
float: right;<br />
font-size: 10px;<br />
margin-right: 5px;<br />
margin-top: 3px;<br />
}<br />
<br />
.navigationBox .category {<br />
background-color: #EDF2F2;<br />
width: 129px;<br />
text-align: right;<br />
padding-right: 8px;<br />
}<br />
<br />
.navigationBox tr:nth-child(odd) {<br />
background-color: #F4F7F7;<br />
}<br />
<br />
.navigationBox .neighbors {<br />
border-top: 1px solid silver;<br />
text-align: center;<br />
background-color: #F4F7F7; padding: 2px;<br />
}<br />
<br />
.navigationBox li {<br />
display: inline-block;<br />
margin:0;<br />
}<br />
<br />
.navigationBox li:after {<br />
content: " · ";<br />
font-weight: bold;<br />
margin-left: 5px;<br />
margin-right: 5px;<br />
}<br />
<br />
.navigationBox li:last-child:after {<br />
content: none;<br />
}<br />
<br />
.navigationBox ul {<br />
margin: 2px; padding: 0px;<br />
}<br />
<br />
.navigationBox .header abbr a {<br />
background: none !important;<br />
padding: 0 !important;<br />
color: #002bb8 !important;<br />
}<br />
<br />
.navigationBox .mw-collapsible-toggle {<br />
font-size: 10px;<br />
margin-right: 3px;<br />
margin-top: 2px;<br />
}<br />
/** <br />
* End navigation box. <br />
*/<br />
<br />
<br />
<br />
/**<br />
* Submitted by Lachlan Barclay<br />
* http://lachlanbarclay.net/2016/01/fixing-owasps-css<br />
*/<br />
<br />
/* For code examples, make any long text add a scrollbar to the code sample, not the whole window */<br />
pre { overflow-x: auto; }<br />
<br />
/* For any text that isn't broken up by a space, force it to wrap if it's too long */<br />
body { word-wrap: break-word; }<br />
<br />
/* For smaller width screens (less than 768px) */<br />
@media (max-width: 767px){<br />
<br />
/* Move the left navigation panel so it's below the content */<br />
#mw-panel { position: static !important; }<br />
<br />
/* Get rid of the margins for the content as there's no left nav now */<br />
#left-navigation,#footer,#content { margin-left: 0 !important; }<br />
<br />
/* Fix the navigation to that it fits properly on the screen */<br />
#left-navigation, #right-navigation { float: none; }<br />
<br />
/* Move the search bar to float to the right */<br />
#p-search { float: right !important; }<br />
<br />
/* Make the search input box a bit smaller so it fits */<br />
div#simpleSearch { width: 8em; }<br />
<br />
/* two fixes for mobilized nav from FEB 10 2016 */<br />
/* #mw-panel li { display: inline; } */<br />
/* #mw-panel {width: 100% !important;} */<br />
}<br />
/** <br />
* End CSS by Lachlan<br />
*/</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=MediaWiki:Sitenotice&diff=256652MediaWiki:Sitenotice2020-01-16T21:17:35Z<p>Hblankenship: </p>
<hr />
<div><div style="width:100%;background-color:lightgray;border-radius:8px;border-color:#233e81;border-style:solid;border-width:1px;text-align:center;font-size:22px;"><br />
This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.<br>To view the new OWASP Foundation website, please visit [https://owasp.org https://owasp.org]<br />
</div></div>Hblankenshiphttps://wiki.owasp.org/index.php?title=MediaWiki:Sitenotice&diff=256650MediaWiki:Sitenotice2020-01-16T21:12:12Z<p>Hblankenship: </p>
<hr />
<div>This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests. To view the new OWASP Foundation website, please visit [https://owasp.org https://owasp.org]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=MediaWiki:Sidebar&diff=256633MediaWiki:Sidebar2020-01-14T13:52:21Z<p>Hblankenship: </p>
<hr />
<div>* Navigation<br />
** mainpage|Home<br />
** About_The_Open_Web_Application_Security_Project|About OWASP<br />
** Acknowledgements|Acknowledgements<br />
** Advertising|Advertising<br />
** http://stores.lulu.com/owasp|Books<br />
** Marketing/Resources|Brand Resources<br />
** Careers|Careers<br />
** OWASP_Chapter|Chapters<br />
** Donate|Donate to OWASP<br />
** :Category:OWASP Download|Downloads<br />
** OWASP_Events/upcoming_events|Events<br />
** Funding|Funding<br />
** Governance|Governance<br />
** OWASP_Initiatives_Global_Strategic_Focus|Initiatives<br />
** https://groups.google.com/a/owasp.org/forum/#!overview|Mailing Lists<br />
** Membership|Membership <br />
** OWASP_Merchandise | Merchandise<br />
** :Category:OWASP Presentations|Presentations<br />
** Press|Press<br />
** :Category:OWASP Project|Projects<br />
** Supporting_Partners|Supporting Partners<br />
** :Category:OWASP Video|Video<br />
* Reference<br />
** :Category:Activity|Activities<br />
** :Category:Attack|Attacks<br />
** :Category:Code Snippet|Code Snippets<br />
** :Category:Control|Controls<br />
** :Category:Glossary|Glossary<br />
** :Category:How To|How To...<br />
** :Category:OWASP Java Project|Java Project<br />
** :Category:OWASP_.NET_Project|.NET Project<br />
** :Category:Principle|Principles<br />
** :Category:Technology|Technologies<br />
** :Category:Threat Agent|Threat Agents<br />
** :Category:Vulnerability|Vulnerabilities</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Funding&diff=256595Funding2020-01-09T13:31:41Z<p>Hblankenship: /* Additional Resources */</p>
<hr />
<div>The purpose of this page is to outline how OWASP Community Leaders can request funding to support the mission of OWASP. If you can't find what you are looking for, please [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contact Us].<br />
=Community Engagement Funding=<br />
<br />
Successful global outreach and community support are critical activities that support our purpose of driving visibility and evolution of safety and security of the worlds software. To this end, some guidelines have been established for the OWASP community leadership to follow as they support the OWASP Foundation and it’s core purpose.<br />
<br />
*Payments are [https://www.owasp.org/index.php/Community_Engagement_-_Payments tracked online]<br />
<br />
Be sure to read the full process below to ensure a smooth and timely transaction. There's a new and improved reimbursement process - [[Reimbursement Process Details|full details including screenshots for every role]].<br />
<br />
*First check the Chapter and "Project Funding Totals" below under "Additional Resources" to make sure you know what is in your Project or Chapter's available funds<br />
*Ready to make a request? '''[https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/14 REQUEST FUNDING PRE-APPROVAL]'''<br />
*Already approved? Submit receipts for reimbursement with our '''[https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/9 REIMBURSEMENT SUBMISSION FORM]'''<br />
*Need to see past requests? See this [https://docs.google.com/document/d/1yoTx7NM3yjLvenLn_226nq4uM-G2TnByOokhexTPWB0/edit document].<br />
'''Please note: Requests are reviewed within 72 hours. Payments are made twice per month and may take up to 22 days depending on time of submission.''' <br />
<br />
==Types of Activity Supported==<br />
<br />
The Board of Directors approved a motion at the October 14, 2015 board meeting that any request for funding that has been approved for one chapter or project, can be considered an acceptable expense for all chapters or projects. If you have an account balance which covers that expense in full, then the item should be considered pre-approved for spending. See '''[https://www.owasp.org/index.php/Community_Engagement_-_Payments Community Engagement Payments]''' for a list of previously approved expenses. If you do not see a comparable expense or expense category or aren't sure your expense is pre-approved, you must submit a request for approval via the [https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/14 Request Funding Pre-Approval] form before requesting reimbursement.<br />
<br />
{| border="1" cellpadding="2"<br />
! scope="col" width="100" | Category<br />
! scope="col" width="250" | Type of Event or Activity<br />
! scope="col" width="450" | Funding Purpose<br />
! scope="col" width="100" | Funding Limit<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Initiatives_Global_Strategic_Focus Initiatives] || Starting/Facilitating an OWASP Initiative || An OWASP Initiative is a specific task with a defined deliverable or expected outcome. An initiative can also be a group of people (task force) with a specific function. Funding request should include the details of the initiative and what the money will be spent on. || $500 USD<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Chapter Chapters]||Local Chapter Meeting|| Bringing great speakers to local chapters continues to be a priority of the organization. Although there are opportunities for remote participation and speakers, face to face contact and engagement is a catalyst to inject enthusiasm and energy into a local area. <br>Note: If you're looking for OWASP merchandise for chapters you can submit on the [https://www.owasp.org/index.php/OWASP_Merchandise merchandise page]|| $500 USD<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Chapter Chapters]||Multiple Chapter Meeting Engagement||Through coordination of several local chapters, it is possible to ignite an entire geographic region through a series of presentations at several local chapters in a relatively short period of time.||$1000 USD<br />
|-<br />
| Outreach||Outreach Speaking Engagement (Non OWASP Conference)|| Presenting an introduction to OWASP at events that are attended by professionals who will benefit from awareness of software security builds our global community and spreads security awareness.||$500 USD<br />
|-<br />
|Outreach||Non - OWASP Event Outreach (OWASP Representation usually a booth or stand)|| Physical representation of the OWASP Foundation at conferences managed by other organizations provides opportunities to engage individuals and companies through visual, tangible, and verbal communication. This also included funding for merchandise to support the booth. ||$500 USD<br />
|-<br />
|[https://www.owasp.org/index.php/Category:OWASP_Project Project] || OWASP Track or Summit || Project Leader that is an accepted speaker taking part in the Open Source Showcase, the OWASP Project Talks, or leading an OWASP Summit Session at the conference they are asking to attend with OWASP Track funding. Preference given to Leaders traveling from the same region that the Global AppSec Conference is taking place in. ||$1000 USD<br />
|-<br />
|[https://www.owasp.org/index.php/Category:OWASP_Project Project] || Project Engagement Funding|| Funding for marketing, graphic design, website hosting, or other project related expenses. [https://docs.google.com/a/owasp.org/document/d/15XuKIezpBpNH4BQYwSJ8i9125ga8IBE0IpvkO14RukI/edit Details] ||$500 USD<br />
|-<br />
|Chapter/Project/Outreach/Initiative || Merchandise || OWASP branded merchandise used to promote OWASP through a booth at a non-owasp event, chapter meeting, or other community building opportunity ||$500 USD<br />
|}<br />
<br />
==Community Engagement Funding Rules==<br />
<br />
The following rules apply for community engagement funding:<br />
* Funding opportunities are available to chapter or project leaders and active OWASP members.<br />
* All funding requests MUST be pre-approved. This is necessary for global budgeting. <br />
*Requested funds will first be deducted from the local chapter or project budget.<br />
*A chapter or project without sufficient funds may request funding from the foundation "Community Engagement" budget. These funds are available on a first come-first serve basis.<br />
*The standard funding thresholds are listed above based on the type of activity.<br />
<br />
<br />
*<strong>Community Engagement funds cannot be used by speakers to attend OWASP conferences</strong>. Under extreme circumstances an exception may be requested by [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contacting Us].<br />
<br />
===Additional Resources===<br />
<br />
View [https://www.owasp.org/index.php/Community_Engagement_-_Payments Community Engagement Payments]<br />
<br />
Your Chapter/Project Balances:<br />
* [https://docs.google.com/spreadsheets/d/1rN_bzfCJxaHOiEMhK4_PAYPbvlDZL5dcHviWvLlf1bw/edit?usp=sharing Chapter and Project Transactions] .<br />
<br />
<br />
<br />
__NOTOC__</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=November_2019&diff=256396November 20192019-12-16T19:57:41Z<p>Hblankenship: </p>
<hr />
<div><br />
Meeting Date:<br />
Nov 19<br />
<br />
Meeting Time:<br />
11 AM US Pacific - [https://www.timeanddate.com/worldclock/meetingdetails.html?year=2019&month=11&day=18&hour=19&min=0&sec=0&p1=16&p2=919&p3=78&p4=136&p5=137&p6=676 other time zones]<br />
<br />
Link to Meeting Recording: <br />
<br />
Meeting Location:<br />
Remote<br />
<br />
Virtual: [https://zoom.us/j/337156503 Zoom Meeting Link] Meeting ID: 337156503 - [https://zoom.us/j/337156503 local dial in numbers]<br />
<br />
AGENDA<br />
<br />
CALL TO ORDER<br />
<br />
CHANGES TO THE AGENDA<br />
<br />
APPROVAL OF MINUTES<br />
[https://docs.google.com/document/d/1Cw_My8iBG8tfq6mN4Xnc5K5BGk6WBPwxSMXwMpx8qrw/edit?usp=sharing October 2019 Board Minutes]<br />
<br />
REPORTS<br />
*[https://drive.google.com/a/owasp.org/file/d/1WC3r2zdKgihQ3eWdqcsN_WR3oj_lBef7/view?usp=sharing October 2019 Balance Sheet Summary]<br />
*[https://drive.google.com/a/owasp.org/file/d/1De5UlEz_CjAj0Tg6hjHCeVxkzYdDXr9H/view?usp=sharing October2019 OWASP Combined P&L]<br />
*[https://drive.google.com/a/owasp.org/file/d/1pF7EMmBrScrznIgAlLGKnyiVo-W6dDfc/view?usp=sharing OWASP 2019 Combined Fin pkg]<br />
<br />
OLD BUSINESS<br />
<br />
NEW BUSINESS<br />
- Vote on Board Member Eligibility Proposal from August F2F<br />
<br />
COMMENTS, ANNOUNCEMENTS, AND OTHER BUSINESS<br />
<br />
Please review the motion that was voted on September 25, 2019. It appears that the motion should of stated "up to 10%", please confirm the correct motion. Dawn Aitken<br />
<br />
Motion: beginning January 1, 2020 the Foundation has decided to change the profit splits of the Global AppSec events. The split will be 90% to the Foundation and 10% to the Chapters. The Chapter will have the option to give the funds back to the Foundation or the Community Fund. If there is no current active Chapter in the area the full 100% will be given to the Foundation. Ofer Maor motions, Richard Greenberg seconds<br />
<br />
<br />
ADJOURNMENT<br />
<br />
<br />
===<br />
<br />
==Old Business==<br />
All active board proposals are listed [https://drive.google.com/folderview?id=0BxSfMVkfLvslVXdvUFV3NkxucWc&usp=sharing here]<br />
* An updated on the foundation's move to Expensify<br />
* A proposed approach from finance on how OWASP can receive restricted gifts efficiently.<br />
<br />
==New Business==<br />
All active board proposals are listed [https://drive.google.com/folderview?id=0BxSfMVkfLvslVXdvUFV3NkxucWc&usp=sharing here]<br />
* [Sherif] - Setting up a transparent discussion with the community on 1) Fair & reasonable expenses, 2) Chapter tiers - how to we provide autonimy and services to various chapter levels. I would like a round table on what they red flags are from each board members & upcoming board members) in order to incorporate into a document and discussions open to the community.</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Local_Chapter_Supporter&diff=256245Local Chapter Supporter2019-12-04T21:34:15Z<p>Hblankenship: </p>
<hr />
<div>Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Chapter Supporter.<br><br />
<br />
<br />
<br />
'''Benefits'''<br><br />
Be recognized as a supporter by posting your company logo on the local OWASP chapter website (Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi). Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] for an additional benefits.<br />
<br />
<br />
Suggested levels (these levels/costs & benefits may vary per chapter) Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] to learn more about specific price levels and beneifts for Chapter Supporters.<br><br />
<br />
*$500/USD &euro;420 - Silver Chapter Supporter<br><br />
*$1000/USD &euro;845 - Gold Chapter Supporter<br><br />
*$2000/USD &euro;1690 - Platinum Chapter Supporter<br><br />
<br />
The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.<br />
<br />
<br />
For donations in USD click here [https://www.owasp.org/index.php/Donate | here]<br />
<br />
If you require an invoice or would like to pay via wire transfer, please let us know using our [https://contact.owasp.org contact us form.]<br />
<br />
[[Membership|Return to Membership]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Local_Chapter_Supporter&diff=256244Local Chapter Supporter2019-12-04T21:33:07Z<p>Hblankenship: </p>
<hr />
<div>Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Chapter Supporter.<br><br />
<br />
<br />
<br />
'''Benefits'''<br><br />
Be recognized as a supporter by posting your company logo on the local OWASP chapter website (Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi). Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] for an additional benefits.<br />
<br />
<br />
Suggested levels (these levels/costs & benefits may vary per chapter) Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] to learn more about specific price levels and beneifts for Chapter Supporters.<br><br />
<br />
*$500/USD &euro;420 - Silver Chapter Supporter<br><br />
*$1000/USD &euro;845 - Gold Chapter Supporter<br><br />
*$2000/USD &euro;1690 - Platinum Chapter Supporter<br><br />
<br />
The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.<br />
<br />
<br />
For donations in USD click here [https://www.owasp.org/index.php/Donate | here]<br />
<br />
If you require an invoice or would like to pay via wire transfer, please let us know using our [https://contact.owasp.com contact us form.]<br />
<br />
[[Membership|Return to Membership]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Local_Chapter_Supporter&diff=256243Local Chapter Supporter2019-12-04T21:32:22Z<p>Hblankenship: </p>
<hr />
<div>Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Chapter Supporter.<br><br />
<br />
<br />
<br />
'''Benefits'''<br><br />
Be recognized as a supporter by posting your company logo on the local OWASP chapter website (Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi). Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] for an additional benefits.<br />
<br />
<br />
Suggested levels (these levels/costs & benefits may vary per chapter) Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] to learn more about specific price levels and beneifts for Chapter Supporters.<br><br />
<br />
*$500/USD &euro;420 - Silver Chapter Supporter<br><br />
*$1000/USD &euro;845 - Gold Chapter Supporter<br><br />
*$2000/USD &euro;1690 - Platinum Chapter Supporter<br><br />
<br />
The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.<br />
<br />
<br />
For donations in USD click here [https://www.owasp.org/index.php/Donate | here]<br />
<br />
If you require an invoice or would like to pay via wire transfer, please let us know using our [http://contact.owasp.com contact us form.]<br />
<br />
[[Membership|Return to Membership]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Local_Chapter_Supporter&diff=256242Local Chapter Supporter2019-12-04T21:31:54Z<p>Hblankenship: </p>
<hr />
<div>Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Chapter Supporter.<br><br />
<br />
<br />
<br />
'''Benefits'''<br><br />
Be recognized as a supporter by posting your company logo on the local OWASP chapter website (Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi). Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] for an additional benefits.<br />
<br />
<br />
Suggested levels (these levels/costs & benefits may vary per chapter) Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] to learn more about specific price levels and beneifts for Chapter Supporters.<br><br />
<br />
*$500/USD &euro;420 - Silver Chapter Supporter<br><br />
*$1000/USD &euro;845 - Gold Chapter Supporter<br><br />
*$2000/USD &euro;1690 - Platinum Chapter Supporter<br><br />
<br />
The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.<br />
<br />
<br />
For donations in USD click here [https://www.owasp.org/index.php/Donate | here]<br />
<br />
If you require an invoice or would like to pay via wire transfer, please let us know using our [http://contactus.owasp.com contact us form.]<br />
<br />
[[Membership|Return to Membership]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Local_Chapter_Supporter&diff=256240Local Chapter Supporter2019-12-04T21:31:25Z<p>Hblankenship: </p>
<hr />
<div>Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Chapter Supporter.<br><br />
<br />
<br />
<br />
'''Benefits'''<br><br />
Be recognized as a supporter by posting your company logo on the local OWASP chapter website (Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi). Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] for an additional benefits.<br />
<br />
<br />
Suggested levels (these levels/costs & benefits may vary per chapter) Please check with your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] to learn more about specific price levels and beneifts for Chapter Supporters.<br><br />
<br />
*$500/USD &euro;420 - Silver Chapter Supporter<br><br />
*$1000/USD &euro;845 - Gold Chapter Supporter<br><br />
*$2000/USD &euro;1690 - Platinum Chapter Supporter<br><br />
<br />
The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.<br />
<br />
<br />
For donations in USD click here [https://www.owasp.org/index.php/Donate | here]<br />
<br />
If you require an invoice or would like to pay via wire transfer, please let us know using our [http://www.tfaforms.com/308703 contact us form.]<br />
<br />
[[Membership|Return to Membership]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=OWASP_Chapter&diff=256239OWASP Chapter2019-12-04T21:29:43Z<p>Hblankenship: </p>
<hr />
<div>{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-<br />
| style="border-right: 1px dotted gray;padding-right:25px;" valign="top" |<br />
The OWASP Chapters program helps to foster local discussion of application security around the world. Our Local Chapters are free and open to anyone and managed by a set of guidelines known as the [[Chapter_Leader_Handbook | OWASP Chapter Handbook]]. Many of the popular [[:Category:OWASP Presentations | OWASP presentations]] are available for everyone to use at meetings.<br />
<br />
==Join Your Local Chapter==<br />
Attending meetings anywhere in the world is FREE and OPEN to anyone, membership is NOT required to do so. We suggest that you locate your "home chapter" and simply sign up on the appropriate mailing list, watch for the next local meeting stop by to introduce yourself ask questions and collaborate. <br />
<br />
Or consider the value of [http://www.owasp.org/index.php/Membership Individual, Corporate, or Academic Supporter membership]. Ready to become a member? [[Image:Join_Now_BlueIcon.JPG|75px|link=https://www.owasp.org/index.php/Membership]]<br />
<br />
==Chapters by Geographic Region==<br />
<br />
Subcategories are listed alphabetically by state, province, or country as applicable. If you would like to restart an inactive chapter, please use the [https://owasporg.atlassian.net/servicedesk/customer/portal/7/create/73 OWASP Chapter Request Form]. <b> CLICK TO EXPAND REGION</b><br />
<br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |United States<br />
|-<br />
| {{:Category:United_States}}<br />
|}<br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |Canada<br />
|-<br />
| {{:Category:Canada}}<br />
|}<br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |Caribbean<br />
|-<br />
| {{:Category:Caribbean}}<br />
|}<br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |Latin America<br />
|-<br />
| {{:Category:Latin America}}<br />
|} <br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |Europe <br />
|-<br />
| {{:Category:Europe}}<br />
|} <br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |Asia/Pacific/Middle East<br />
|-<br />
| {{:Category:Asia/Pacific/Middle_East}}<br />
|}<br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |Africa<br />
|-<br />
| {{:Category:Africa}}<br />
|}<br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |Virtual<br />
|-<br />
| {{:Category:Virtual}}<br />
|}<br />
{| class="mw-collapsible mw-collapsed wikitable"<br />
|-<br />
! width="500" |OWASP Student Chapter<br />
|-<br />
| {{:Category:OWASP Student Chapter}}<br />
|}<br />
<br />
==OWASP Student Chapters Program==<br />
<br />
The Open Web Application Security Project (OWASP) has local chapters around the world that help teach, learn, and inspire application security. Our Student Chapters program helps to extend application security into colleges and universities worldwide. OWASP Student Chapters Program is a way to integrate passionate AppSec students. We want to create students chapters in order to organise events, meetings and have fun! If your school has a computer science or management information systems degree, we can help you [https://www.owasp.org/index.php/OWASP_Student_Chapters_Program Start a Student Chapter] there.<br />
<br />
View the [[OWASP Student Chapters Program]] information and a list of participating student groups.<br />
<br />
==Start a Chapter==<br />
<br />
You don't need to be an expert in application security, just motivated to help build the OWASP community and organize meetings. There's a lot of help available from other Local Chapter leaders. So get your community moving to help the mission of software security awareness and start a local OWASP Chapter today!<br />
<br />
'''A request to start or restart a chapter should be submitted by the founding member or group to the [https://owasporg.atlassian.net/servicedesk/customer/portal/7/create/73 OWASP Chapter Request Form]''' and should include:<br />
<br />
# List of the people that are founding the chapter and the geographical area to be covered by the new chapter, <br />
# Brief description of professional background or resume (from each of the founding leaders),<br />
# Statement of why he or she wants to be an OWASP Leader (from each of the founding leaders).<br />
# Each founding leader(s) (as well as any leaders joining the chapter after its creation) must read, understand, and agree to the terms of the [[Chapter Leader Handbook]].<br />
<br />
Generally speaking, the Chapter Leader Handbook asks that you:<br />
* Will commit to organizing at least quarterly meetings<br />
* Will find a stable location for meetings<br />
* Will find great speakers<br />
* Will publicize the chapter and recruit new members<br />
* Will keep the chapter non-commercial<br />
<br />
'''What is the process once I submit my request to start a chapter?'''<br />
<br />
Once submitted, the request will be reviewed and approved by the OWASP Staff. Once the new chapter is approved<br />
<br />
1. A chapter wiki page and mailing list will be set up for the new leader(s). <br />
<br />
2. The chapter leader(s) will be given an owasp email account and password to operate as the administrator of the new chapter mailing list.<br />
<br />
==Update Chapter Leader==<br />
<br />
You may also use the [http://www.tfaforms.com/261541 OWASP Chapter Request Form] to modify or add new chapter leaders. The chapter wiki page and OWASP Foundation records must be updated for leaders to access benefits. This form ensures that our internal records will be up to date.<br />
<br />
==Bring Speakers to Your Chapter==<br />
To support Local Chapter meetings and (web application) security conferences we started a travel-support program for OWASP presenters. If you are interested in attracting an OWASP speaker to your event, have a look at [[OWASP on the Move]]!<br />
<br />
==Chapter Support Materials==<br />
<br />
* The OWASP [[Chapter Leader Handbook]] includes mandatory rules and guidelines.<br />
<br />
Funding<br />
* [https://www.owasp.org/index.php/Funding General and Chapter Funding Information]<br />
<br />
Chapter Communications<br />
* [https://zoom.us/ Zoom] is the meeting software available to chapters - request a Zoom account for your chapter [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 here].<br />
* OWASP [[Chapter Presentation Bundles | Chapter Presentation Bundles]].<br />
* OWASP [[Template:News Item | News Item Template]].<br />
* [[OWASP Meetup Information | OWASP Meetup Information]].<br />
<br />
Marketing and Promotion<br />
* OWASP [[Chapter_Promotion | Chapter promotion Tips]].<br />
* For OWASP Branded Chapter Supplies please fill out this [https://spreadsheets.google.com/a/owasp.org/spreadsheet/viewform?formkey=dF85bGtvdWdrd2JjYldNZ1gxSkJxaEE6MQ Google Form] for requesting general OWASP promotional materials. Also, [[Chapter Supplies | View Apparel]] available through our 3rd party vendor.<br />
* OWASP [[Marketing | Marketing Resources, Logos and Brand Guidelines]].<br />
<br />
For more detail visit the OWASP [[:Category:Chapter_Resources | Chapter Resources Page]].<br />
<br />
| style="padding-left:25px;width:200px;" valign="top" |<br />
<br />
== Learning Resources ==<br />
<br />
[https://www.youtube.com/channel/UCxSU-KvNmYusZEq6v4YK5Lw/featured Ottawa Chapter Training Videos]<br />
<br />
<br><br />
<br />
Let [mailto://Tiffany.Long@owasp.org OWASP] know if your Chapter has training resources you would like to see here<br />
|}</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Project_Sponsorship_Operational_Guidelines&diff=256238Project Sponsorship Operational Guidelines2019-12-04T21:22:03Z<p>Hblankenship: </p>
<hr />
<div>The set of guidelines below aim to inform project sponsors of what they can expect if they donate funds, or other resources, to an OWASP Project. Additionally, they outline what project leaders can offer sponsors in exchange for donating funds to their OWASP Project.<br />
<br />
In order to avoid any problems or misunderstandings, we have developed these guidelines to provide clear expectations of how sponsors and projects are expected to interact when funds are given to a project for product development. <br />
<br />
<br />
==Guidelines==<br />
# All financial gifts less than $1,000 to the OWASP Foundation are unrestricted. <br />
# Any company or individual may be recognized by the placement of one sponsorship logo on the OWASP project page and product provided the gift is more than $1,000.<br />
# Gifts less than $1000 USD may be listed as "Supporters" with their company name, and website url added to the project page and product. No logo will be placed for donations below this amount. <br />
# If a sponsor is donating funds to a specific project, then the logo must be placed in the 'Acknowledgements' tab under the 'Project Sponsors' heading using the new OWASP Projects wiki template. <br />
# Sponsor logos must NEVER be placed anywhere other than within the 'Acknowledgements' tab under the 'Project Sponsors' heading on the project wiki page. <br />
# Logos must be created using the following specifications for placement on the wiki page:<br />
##Resolution: 72dpi<br />
##File Type:.PNG or .JPEG<br />
##Size: No longer than 300 x 300 px<br />
# Sponsor logos on the product: All sponsor logos must be placed on a page/section/location that is separate from the content of the product. They must contain the company logo, their name, and their website url. The aim is to have a separate section on the product that clearly lists sponsor information. Template acknowledgement copy: “OWASP does not endorse vendors, but we would like to acknowledge the following contributions....” <br />
# Logos must be created using the following specifications for placement on the product:<br />
## Resolution: 300dpi<br />
## File Type: .EPS<br />
## Size: No smaller than 5in x 5in <br />
# All sponsorship logos will be placed on the project product and wiki page for one year or until the next major release. All legacy projects will be given one year to comply with these guidelines starting on January 01, 2014.<br />
# Logos must be sent to the OWASP Project Leader for inclusion on the OWASP Project wiki page and product. It is the responsibility of the Project Leader to make sure all of his/her project sponsors are properly represented on the OWASP Project wiki page and product.<br />
# All additional contributors get their name, email address, company name (if desired), and a link to one external website (no logo). No logos should be added for individuals who only contribute time, or for any other sort of contribution.<br />
# Project Sponsorship Rejection: A Project Leader can decide to accept sponsorships or not, but this must be across the board. In essence, a Project Leader must agree to accept all sponsors, or he/she must agree to deny all sponsorship support. However, if a Project Leader wants to reject a specific sponsor (not across the board) then an exception will have to be requested from the Board of Directors.<br />
# If a Project Leader fails to follow these guidelines, the OWASP Projects Manager will notify the Project Leader of the infringement. If the infringement continues, the Project Leader may face the removal of all Project Leader privileges until further notice.</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Membership&diff=256237Membership2019-12-04T21:21:19Z<p>Hblankenship: </p>
<hr />
<div><br />
= Home =<br />
<br />
[[File:MEMBERSHIP BANNER.jpg|link=]]<br />
<br />
Software powers the world, but insecure software threatens safety, trust, and economic growth. The Open Web Application Security Project (OWASP) is dedicated to making application security visible by empowering individuals and organizations to make informed decisions about true application security risks.<br />
<br />
OWASP boasts 46,000+ participants, more than 65 organizational supporters, and even more academic supporters.<br />
<br />
As a 501(c)(3) not-for-profit worldwide charitable organization, OWASP does not endorse or recommend commercial products or services. Instead, we allow our community to remain vendor neutral with the collective wisdom of the best individual minds in application security worldwide. This simple rule is the key to our success since 2001.<br />
<br />
<b>Your individual and corporate membership powers the organization and helps us [https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project serve the mission]. Please consider becoming an OWASP member today!</b><br /><br /><br />
<br />
[[Image:Join.png|link=https://myowasp.force.com/joinapi__membershiplist?id=a5V0B0000008kL0UAI&order=1]] <br />
[[Image:Renew.png|link=https://myowasp.force.com]]<br />
<br />
'''Questions about OWASP Membership?''' [[MEMBERSHIP FAQ]] <br />
<br />
'''Care to see our global membership demographics?''' [https://docs.google.com/spreadsheets/d/1jG1ad1s6pEbBjsGkftCB_2dU70n6GajRe4CYLGFwkM8/edit?usp=sharing Membership Demographics as of January 2017]<br />
<br />
== Corporate Membership ==<br />
<br />
To find out more about our Corporate Membership options and how to become a Corporate Member, please visit our [https://www.owasp.org/index.php/Corporate_Membership Corporate Membership] page.<br />
<br />
Visit our [https://www.owasp.org/index.php/Acknowledgements Acknowledgement] page to view the companies who already have chosen to support OWASP as a Corporate Member. <br />
<br />
== Individual Membership ==<br />
Individual Members support OWASP at the $50/USD level annually. We also offer a 2 year membership for $95/USD and a Lifetime membership for $500/USD.<br /><br />
To find out more about Individual Membership, please visit the [[Individual Member]] page.<br />
<br />
== Student Membership ==<br />
Students may join OWASP at a special discounted student rate. If you are a student and are interested in joining OWASP, please visit our [https://www.owasp.org/index.php/Student_Membership Student Membership page]<br />
<br />
==Honorary Membership==<br />
If you are an OWASP leader that would like an Honorary Membership and does not have a paid individual membership on file but meets the requirements for Honorary Membership, then you MUST APPLY for an Honorary Membership. Submissions will be reviewed and verified by OWASP. (standard format is firstname.lastname@owaso.org)<br />
To learn more about Honorary Membership, please visit our [https://www.owasp.org/index.php/Honorary_Membership Honorary Membership page]<br />
<br />
= Other ways to Support OWASP =<br />
<br />
{| border="1" cellpadding="2"<br />
! scope="col" width="250" | [[Image:Btn_donate_SM.gif|link=https://www.owasp.org/index.php/Donate]]<br />
! scope="col" width="700" | OWASP is an Open community of Application Security Professionals. The opportunities to participate in the organization are limitless<br />
|-<br />
| align="center" |[[Academic Supporter]]|| [http://www.tfaforms.com/338407 Application]<br />
|-<br />
| align="center" |[[Local Chapter Supporter]]|| Organizations that are not yet interested in becoming a full Corporate Member but who have a desire to direct their support in a more regional manner may prefer to become a Local Chapter Supporter. Check with your local Chapter Leader to learn more about specific price levels for Chapter Supporters. The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.[https://www.owasp.org/index.php/Category:OWASP_Chapter#Local_Chapters local chapter page] <br />
|-<br />
| align="center" |[[Single Meeting Supporter]]||Organizations that wish to support an OWASP local chapter with a 100% tax deductible donation to enable OWASP Foundation to continue the mission. The fees are set by the local chapter, so contact the chapter leader of the chapter that you want to work with. [https://www.owasp.org/index.php/Category:OWASP_Chapter#Local_Chapters local chapter page] <br />
|-<br />
| align="center" |[https://www.owasp.org/index.php/Category:OWASP_AppSec_Conference Event Sponsorship]||Participate in one of our Global, Local or Regional events by sponsoring the event or providing tangibles to the conference attendees. View [https://www.owasp.org/index.php/Category:OWASP_AppSec_Conference OWASP Events]<br />
|-<br />
| align="center" |OWASP Foundation Donation||The OWASP Foundation is a registered 501(c)3 in the US as well as a Not for Profit entity in Europe. As a result, your direct donation is eligible to be deducted as a charitable donation. Please contact your tax advisor for complete information. [https://www.owasp.org/index.php/Donate Donate Here]<br />
|-<br />
| align="center" |Individual Participation||With over 200 active chapters globally and hundreds of OWASP Projects and millions of great ideas waiting to become projects, it would be difficult to NOT find a way to participate. All it takes to participate is a willingness to share ideas and collaborate with the key minds in the industry. Please reach out to your local [https://www.owasp.org/index.php/OWASP_Chapter chapter] leader, a current [https://www.owasp.org/index.php/Category:OWASP_Project project] leader, or start your own! <br />
|-<br />
| align="center" |[https://www.owasp.org/index.php/Project_Sponsorship_Operational_Guidelines Project Contribution] or [https://www.owasp.org/index.php/Donate Donation]||With over 100 active projects globally and hundreds of OWASP Project roles to contribute to, it would be difficult to NOT find a way to participate within the OWASP Projects Division. All it takes to participate is a willingness to share ideas and collaborate with the key minds in the industry. Please click on the Donate link above to share funds, or visit the [http://owasp.force.com/volunteers/GW_Volunteers__VolunteersJobListing OWASP Initiatives page] to find out how you can contribute to one of our OWASP Projects. <br />
|-<br />
| align="center" | Partnership Co-Marketing Agreement || [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/19 Contact us] to learn more<br />
<br />
|}<br />
<br />
= Additional Resources =<br />
<br />
NEW MEMBERSHIP FLYER VERSION COMING SOON<br />
<br />
= Testimonials =<br />
<br />
''“At a time when malicious attacks are intensifying and organizations increasingly rely on applications with known and vulnerabilities to fulfill their missions, OWASP is a vital part of defending the integrity of businesses and institutions. We need strong DevOps and AppSec communities to ensure the safety and security of commerce. We’re proud to help OWASP fulfill that role.”''<br><br />
'''Brian Maccaba, CEO, Waratek'''<br />
<br><br />
<br><br />
''“Johnson Controls has been an innovator in the building and energy efficiency industry since Warren Johnson’s invention of the electric room thermostat over a century ago. With the functionality and efficiency that technology has brought to building controls devices the need for software security in embedded controls and the IoT is more apparent than ever. Johnson Controls leverages several OWASP projects to include the OWASP Top Ten and the Application Security Verification Standard (ASVS) and others. Partnering with OWASP is a logical step given our shared commitment to software security.”''<br><br />
'''Jason R. Rosselot, Director Global Product Security (GPS), Johnson Controls''' <br />
<br><br />
<br><br />
''"The OWASP resources and tools have been instrumental in getting our company going. We want to support the ongoing work."''<br> <br />
'''Jacob Hansen, Cobalt.io'''<br />
<br><br />
<br><br />
''“We want to give back to the organization which has given the security community at large so much. It's important that the OWASP mission continue, and we wish to be a part of it.”''<br> <br />
'''Kiran Sharma, Application Security Program –Lead, FICO'''<br />
<br><br />
<br><br />
“''OWASP’s AppSec events are one of the world’s most professional events, gathering a top application security managerial and technical audience. Ever since its foundation, Checkmarx has been supporting OWASP and has enjoyed working closely with a hardworking, devoted and professional team.''” <br> '''Asaph Schulman, VP Marketing at Checkmarx'''<br />
<br><br />
<br />
__NOTOC__<br />
<br />
<headertabs></headertabs></div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Donate&diff=256236Donate2019-12-04T21:19:02Z<p>Hblankenship: </p>
<hr />
<div>[[Image:OWASP_Donations_Banner.jpg]]<br />
<br />
__NOTOC__<br />
===[https://www.owasp.org/index.php/Donaciones View this page in Spanish]===<br />
<br><br />
<br><br />
===Supporting & Sponsoring a Local Chapter or Project===<br />
<br />
Please visit our '''Other Ways To Support OWASP''' [https://www.owasp.org/index.php/Membership#tab=Other_ways_to_Support_OWASP page] to process your contribution. <br />
<br />
===Donate using Paypal===<br />
Use the button below to donate with PayPal:<br />
<br />
{{#widget:PayPal Donation<br />
|target=_blank<br />
|budget=Other (Website Donation) }}<br />
<br />
Or:<br />
<br />
You can make your donation via Paypal to: [mailto:owasp.foundation@owasp.org owasp.foundation@owasp.org]. Please indicate that the funds are for a donation to the OWASP Foundation.<br />
<br />
===Donate via Check===<br />
<br />
You can also donate by sending a check or money order payable to "OWASP Foundation" directly to the address below. Please indicate "Donation to the Foundation" in the memo section of your payment method. <br />
<br />
'''OWASP Foundation'''<br />
401 Edgewater Place, Suite 600<br />
Wakefield, MA 01880 U.S.A.<br />
<br />
Please include the name under which you wish the donation to be credited, either your own or the third-party if it is a gift on behalf of someone else, and an e-mail address to which we can acknowledge receipt. This information will not be used for any other purpose. A receipt may be requested for any donations grater than US$100, provided a return address is included. <br />
<br />
==Third Party Sites Authorized to Accept OWASP Donations==<br />
<br />
* [http://smile.amazon.com/ch/20-0963503 Amazon Smile]<br />
<br />
* [https://www.yourcause.com/charities.aspx?CharityID=263427 Your Cause]<br />
<br />
<br />
==Company Matching Programs==<br />
<br />
Tax ID and other information can be found here: [https://www.owasp.org/index.php/About_OWASP/Financial_Transparency Financial Transparency]<br />
<br />
TBA<br />
<br><br />
<br><br />
<br />
==Frequently Asked Questions about Contributing to The OWASP Foundation==<br />
<br />
'''Why should I donate?'''<br />
<br />
As a volunteer-based organization, the OWASP Foundation stands in need of dedicated volunteers who can work on software, documentation, or administrative issues within each of the OWASP projects as well as other Foundation initiatives. OWASP provides the infrastructure for the community - the mailing lists, code repositories, bug tracking systems, etc. <br />
If you use our platform, please consider donating so that we can continue to spread our mission throughout the world.<br />
<br />
'''Is there a cost to participate?'''<br />
<br />
Absolutely not! The OWASP Foundation is committed to providing free access to all interested participants. All of our code is distributed under the OSI-approved licenses. The project mailing lists are all open to the public and participation is encouraged. So, there is no cost required to contribute to the projects. However, there is usually a substantial time commitment that is required in order to contribute to a project.<br />
<br />
'''Create a new project'''<br />
<br />
The OWASP Foundation is also looking for new or existing documentation or software projects related to application security that are in need of a home. If you are in a position to contribute documentation that could help other organizations, or software you have developed, we may be able to provide a home for it. Understand that this would mean assigning the OWASP Foundation rights to modify and distribute your work and offer it under a FLOSS license. See the Contributor Licensing Agreement for more details. Please contact support@owasp.org for more details about starting new projects in the OWASP.<br />
<br />
'''If I donate financially, where would my donations go?'''<br />
<br />
If you'd like to contribute financially to the foundation, we would greatly appreciate it. Currently, less than 1% of our annual revenue comes from donations and in order to build a more sustainable business model, ensuring the ongoing success of the Foundation we would like to increase the number of donors and donations.<br />
<br />
As the chart below shows, in 2013 nearly 60% of our expenses were related to conferences and events (correlating to the bulk of our revenue as well). Our conferences are relatively self sustaining though, so donations go to support the rest of the operations (the staff) and programs of the Foundation including project management, mission outreach, and local chapter support. I you would like to earmark, your donation to a particular program or area of the Foundation's operations, please let us know and we will do our best to honor that intent. Otherwise, we will put your donation toward the area where it is needed most at the time of your donation. If you wish to provide equipment for use by the Foundation, please contact us before attempting to send it "here" directly.<br />
<br />
[[Image:2013_OWASP_Revenue.png|700px]] [[Image:2013_OWASP_Expenses.png|600px]]<br />
<br />
'''The OWASP Foundation is a non-profit organization'''<br />
<br />
The OWASP Foundation is a private operating foundation that is registered as a non-profit, charitable organization under Section 501(c)(3) of the U.S. Internal Revenue Code. This means that, for individuals within the U.S., donations to the OWASP should be tax-deductible. We are not accountants, so this cannot be trusted as financial advice of any kind, but hopefully this description will be useful to those who advise you in these matters.<br />
<br />
'''I'd like to talk to someone about supporting the OWASP!'''<br />
<br />
If you would like more information about supporting the OWASP, please [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 contact us] for more information. All information will be kept in strictest confidence.<br />
<br />
<br />
[[About_OWASP]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User:Sibah&diff=256223User:Sibah2019-12-02T20:29:13Z<p>Hblankenship: Creating user page for new user.</p>
<hr />
<div>Organize logistical and administrative support for while coordinating with sales team to develop the strategy and direction of events. Collaborate with the marketing and design teams to facilitate event promotion. Support staff in managing budgets, calendars, and partnerships for event efforts. Collaborate with leaders, members, and partners to grow and evolve regional events.</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User_talk:Sibah&diff=256224User talk:Sibah2019-12-02T20:29:13Z<p>Hblankenship: Welcome!</p>
<hr />
<div>'''Welcome to ''OWASP''!'''<br />
We hope you will contribute much and well.<br />
You will probably want to read the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents help pages].<br />
Again, welcome and have fun! [[User:Hblankenship|Hblankenship]] ([[User talk:Hblankenship|talk]]) 14:29, 2 December 2019 (CST)</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Funding&diff=256102Funding2019-11-18T14:42:09Z<p>Hblankenship: /* Additional Resources */</p>
<hr />
<div>The purpose of this page is to outline how OWASP Community Leaders can request funding to support the mission of OWASP. If you can't find what you are looking for, please [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contact Us].<br />
=Community Engagement Funding=<br />
<br />
Successful global outreach and community support are critical activities that support our purpose of driving visibility and evolution of safety and security of the worlds software. To this end, some guidelines have been established for the OWASP community leadership to follow as they support the OWASP Foundation and it’s core purpose.<br />
<br />
*Payments are [https://www.owasp.org/index.php/Community_Engagement_-_Payments tracked online]<br />
<br />
Be sure to read the full process below to ensure a smooth and timely transaction. There's a new and improved reimbursement process - [[Reimbursement Process Details|full details including screenshots for every role]].<br />
<br />
*First check the Chapter and "Project Funding Totals" below under "Additional Resources" to make sure you know what is in your Project or Chapter's available funds<br />
*Ready to make a request? '''[https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/14 REQUEST FUNDING PRE-APPROVAL]'''<br />
*Already approved? Submit receipts for reimbursement with our '''[https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/9 REIMBURSEMENT SUBMISSION FORM]'''<br />
*Need to see past requests? See this [https://docs.google.com/document/d/1yoTx7NM3yjLvenLn_226nq4uM-G2TnByOokhexTPWB0/edit document].<br />
'''Please note: Requests are reviewed within 72 hours. Payments are made twice per month and may take up to 22 days depending on time of submission.''' <br />
<br />
==Types of Activity Supported==<br />
<br />
The Board of Directors approved a motion at the October 14, 2015 board meeting that any request for funding that has been approved for one chapter or project, can be considered an acceptable expense for all chapters or projects. If you have an account balance which covers that expense in full, then the item should be considered pre-approved for spending. See '''[https://www.owasp.org/index.php/Community_Engagement_-_Payments Community Engagement Payments]''' for a list of previously approved expenses. If you do not see a comparable expense or expense category or aren't sure your expense is pre-approved, you must submit a request for approval via the [https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/14 Request Funding Pre-Approval] form before requesting reimbursement.<br />
<br />
{| border="1" cellpadding="2"<br />
! scope="col" width="100" | Category<br />
! scope="col" width="250" | Type of Event or Activity<br />
! scope="col" width="450" | Funding Purpose<br />
! scope="col" width="100" | Funding Limit<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Initiatives_Global_Strategic_Focus Initiatives] || Starting/Facilitating an OWASP Initiative || An OWASP Initiative is a specific task with a defined deliverable or expected outcome. An initiative can also be a group of people (task force) with a specific function. Funding request should include the details of the initiative and what the money will be spent on. || $500 USD<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Chapter Chapters]||Local Chapter Meeting|| Bringing great speakers to local chapters continues to be a priority of the organization. Although there are opportunities for remote participation and speakers, face to face contact and engagement is a catalyst to inject enthusiasm and energy into a local area. <br>Note: If you're looking for OWASP merchandise for chapters you can submit on the [https://www.owasp.org/index.php/OWASP_Merchandise merchandise page]|| $500 USD<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Chapter Chapters]||Multiple Chapter Meeting Engagement||Through coordination of several local chapters, it is possible to ignite an entire geographic region through a series of presentations at several local chapters in a relatively short period of time.||$1000 USD<br />
|-<br />
| Outreach||Outreach Speaking Engagement (Non OWASP Conference)|| Presenting an introduction to OWASP at events that are attended by professionals who will benefit from awareness of software security builds our global community and spreads security awareness.||$500 USD<br />
|-<br />
|Outreach||Non - OWASP Event Outreach (OWASP Representation usually a booth or stand)|| Physical representation of the OWASP Foundation at conferences managed by other organizations provides opportunities to engage individuals and companies through visual, tangible, and verbal communication. This also included funding for merchandise to support the booth. ||$500 USD<br />
|-<br />
|[https://www.owasp.org/index.php/Category:OWASP_Project Project] || OWASP Track or Summit || Project Leader that is an accepted speaker taking part in the Open Source Showcase, the OWASP Project Talks, or leading an OWASP Summit Session at the conference they are asking to attend with OWASP Track funding. Preference given to Leaders traveling from the same region that the Global AppSec Conference is taking place in. ||$1000 USD<br />
|-<br />
|[https://www.owasp.org/index.php/Category:OWASP_Project Project] || Project Engagement Funding|| Funding for marketing, graphic design, website hosting, or other project related expenses. [https://docs.google.com/a/owasp.org/document/d/15XuKIezpBpNH4BQYwSJ8i9125ga8IBE0IpvkO14RukI/edit Details] ||$500 USD<br />
|-<br />
|Chapter/Project/Outreach/Initiative || Merchandise || OWASP branded merchandise used to promote OWASP through a booth at a non-owasp event, chapter meeting, or other community building opportunity ||$500 USD<br />
|}<br />
<br />
==Community Engagement Funding Rules==<br />
<br />
The following rules apply for community engagement funding:<br />
* Funding opportunities are available to chapter or project leaders and active OWASP members.<br />
* All funding requests MUST be pre-approved. This is necessary for global budgeting. <br />
*Requested funds will first be deducted from the local chapter or project budget.<br />
*A chapter or project without sufficient funds may request funding from the foundation "Community Engagement" budget. These funds are available on a first come-first serve basis.<br />
*The standard funding thresholds are listed above based on the type of activity.<br />
<br />
<br />
*<strong>Community Engagement funds cannot be used by speakers to attend OWASP conferences</strong>. Under extreme circumstances an exception may be requested by [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contacting Us].<br />
<br />
===Additional Resources===<br />
<br />
View [https://www.owasp.org/index.php/Community_Engagement_-_Payments Community Engagement Payments]<br />
<br />
Your Chapter/Project Balances:<br />
* [https://docs.google.com/spreadsheets/d/1khGlpvwSb2ZTlkkoeg_g67_NJQ5yXrzKWNvHB7le1cI/edit?usp=sharing Chapter and Project Transactions] .<br />
<br />
<br />
<br />
__NOTOC__</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User:Pinosdave1&diff=256078User:Pinosdave12019-11-16T20:10:18Z<p>Hblankenship: Creating user page for new user.</p>
<hr />
<div>Please see my previous submission for username pinosdave. I am in need of the account to join the Omaha, NE chapter. Per Michael Born "Good day Dawn (dawn.aitken@owasp.com),<br />
<br />
I hope this email finds you well. I'm writing to inquire about getting David Pinos (pinosdave@gmail.com) moving forward with an OWASP email and Wiki account. David and I are moving forward with a chapter re-invigoration attempt. David applied for an OWASP email and wiki account several weeks ago and we were just wondering where in the process of approval his account request was."</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User_talk:Pinosdave1&diff=256079User talk:Pinosdave12019-11-16T20:10:18Z<p>Hblankenship: Welcome!</p>
<hr />
<div>'''Welcome to ''OWASP''!'''<br />
We hope you will contribute much and well.<br />
You will probably want to read the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents help pages].<br />
Again, welcome and have fun! [[User:Hblankenship|Hblankenship]] ([[User talk:Hblankenship|talk]]) 14:10, 16 November 2019 (CST)</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User:Swukong&diff=256066User:Swukong2019-11-14T22:14:09Z<p>Hblankenship: Creating user page for new user.</p>
<hr />
<div>I am currently in college for a BS in CyberSecurity, with a concentration in Mobile And Wireless Security. I am also learning Python and the various cloud providers, and experimenting with Arduino. Eventually, I hope to seek employment in the private sector. My impression right now is that I want to actually practice in system defense, rather than red team or offense.<br />
Professional Certifications:<br />
Certified Intelligence Fundamentals Professional</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User_talk:Swukong&diff=256067User talk:Swukong2019-11-14T22:14:09Z<p>Hblankenship: Welcome!</p>
<hr />
<div>'''Welcome to ''OWASP''!'''<br />
We hope you will contribute much and well.<br />
You will probably want to read the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents help pages].<br />
Again, welcome and have fun! [[User:Hblankenship|Hblankenship]] ([[User talk:Hblankenship|talk]]) 16:14, 14 November 2019 (CST)</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=OWASP_Events/upcoming_events&diff=256045OWASP Events/upcoming events2019-11-13T21:08:52Z<p>Hblankenship: </p>
<hr />
<div>== Global AppSec Events ==<br />
{| class="wikitable"<br />
|-<br />
! Global AppSec Events<br />
! Date<br />
! Location<br />
! Call for Papers<br />
! Call for Training<br />
! Registration<br />
! Sponsorships<br />
|-<br />
|[https://dublin.globalappsec.org Global AppSec Dublin]<br />
|June 15-19, 2020<br />
|Dublin, Ireland<br />
|Coming Soon<br />
|Coming Soon<br />
|Coming Soon<br />
|Coming Soon<br />
|-<br />
|[https://sf.globalappsec.org Global AppSec San Francisco]<br />
|October 19-23, 2020<br />
|San Francisco, CA<br />
|Coming Soon<br />
|Coming Soon<br />
|Coming Soon<br />
|Coming Soon<br />
|}<br />
<br />
== Regional Events ==<br />
<br />
<br />
Regional OWASP events should be entered with all information requested on the [https://ocms.owasp.org JIRA Service Desk Request Form.] Please, provide a reasonable timeframe to allow for approval and an additional request for help. (If there is incomplete information it will delay the process.) <br />
{| class="wikitable"<br />
|-<br />
! Event<br />
! Date <br />
! Location<br />
|-<br />
| [https://god.owasp.de/ German OWASP Day 2019]<br />
| December 9-10, 2019<br />
| Karlsruhe, German<br />
|-<br />
| [https://2020.appseccalifornia.org/ AppSec California 2020]<br />
| January 21-24, 2020<br />
| Santa Monica, CA<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_New_Zealand_Day_2020 OWASP New Zealand Day 2020]<br />
| February 19-21, 2020<br />
| Auckland, New Zealand<br />
|-<br />
| [https://www.owaspseasides.com/ OWASP Seasides]<br />
| March 3-5, 2020<br />
| Panjim Goa, India<br />
|-<br />
| [https://www.snowfroc.com/ SnowFROC 2020]<br />
| March 5, 2020<br />
| Denver, CO<br />
|-<br />
| [https://2020.appsecmorocco.org/ AppSec Morocco & Africa 2020]<br />
| June 4-5, 2020<br />
| Rabat, Morocco<br />
|-<br />
|}<br />
<br />
== Global Partnership Events ==<br />
<br />
The OWASP Foundation global partnership agreements are available for national and international events. This agreement is a strategic yearly agreement with the Foundation and should not be confused with annual regional events that are supported by local chapters. Please submit your request for consideration well in advance for consideration, questions, and approval. [https://ocms.owasp.org JIRA Service Desk Request Form] and choose "Co-marketing" and fill out all required fields and attach the proposed agreement. <br />
<br />
{| class="wikitable"<br />
|-<br />
! Event<br />
! Date<br />
! Location<br />
! Paid Members email marketing@owasp.org <br />
<br />
|-<br />
|[https://www.blackhat.com/eu-19/?_mc=sem_x_bheur_le_tsnr_bheu_x_goog_x-BHEU2019Beu&ppc=y&kw=x&gclid=EAIaIQobChMI7M7t_9im5QIVAj0MCh1kDAAlEAAYASAAEgK18vD_BwE BlackHat Europe 2019]<br />
|December 2-5, 2019<br />
|London<br />
|€ 200.00 discount code available<br />
|-<br />
|}</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Funding&diff=255977Funding2019-11-07T02:49:21Z<p>Hblankenship: /* Additional Resources */</p>
<hr />
<div>The purpose of this page is to outline how OWASP Community Leaders can request funding to support the mission of OWASP. If you can't find what you are looking for, please [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contact Us].<br />
=Community Engagement Funding=<br />
<br />
Successful global outreach and community support are critical activities that support our purpose of driving visibility and evolution of safety and security of the worlds software. To this end, some guidelines have been established for the OWASP community leadership to follow as they support the OWASP Foundation and it’s core purpose.<br />
<br />
*Payments are [https://www.owasp.org/index.php/Community_Engagement_-_Payments tracked online]<br />
<br />
Be sure to read the full process below to ensure a smooth and timely transaction. There's a new and improved reimbursement process - [[Reimbursement Process Details|full details including screenshots for every role]].<br />
<br />
*First check the Chapter and "Project Funding Totals" below under "Additional Resources" to make sure you know what is in your Project or Chapter's available funds<br />
*Ready to make a request? '''[https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/14 REQUEST FUNDING PRE-APPROVAL]'''<br />
*Already approved? Submit receipts for reimbursement with our '''[https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/9 REIMBURSEMENT SUBMISSION FORM]'''<br />
*Need to see past requests? See this [https://docs.google.com/document/d/1yoTx7NM3yjLvenLn_226nq4uM-G2TnByOokhexTPWB0/edit document].<br />
'''Please note: Requests are reviewed within 72 hours. Payments are made twice per month and may take up to 22 days depending on time of submission.''' <br />
<br />
==Types of Activity Supported==<br />
<br />
The Board of Directors approved a motion at the October 14, 2015 board meeting that any request for funding that has been approved for one chapter or project, can be considered an acceptable expense for all chapters or projects. If you have an account balance which covers that expense in full, then the item should be considered pre-approved for spending. See '''[https://www.owasp.org/index.php/Community_Engagement_-_Payments Community Engagement Payments]''' for a list of previously approved expenses. If you do not see a comparable expense or expense category or aren't sure your expense is pre-approved, you must submit a request for approval via the [https://owasporg.atlassian.net/servicedesk/customer/portal/4/group/14 Request Funding Pre-Approval] form before requesting reimbursement.<br />
<br />
{| border="1" cellpadding="2"<br />
! scope="col" width="100" | Category<br />
! scope="col" width="250" | Type of Event or Activity<br />
! scope="col" width="450" | Funding Purpose<br />
! scope="col" width="100" | Funding Limit<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Initiatives_Global_Strategic_Focus Initiatives] || Starting/Facilitating an OWASP Initiative || An OWASP Initiative is a specific task with a defined deliverable or expected outcome. An initiative can also be a group of people (task force) with a specific function. Funding request should include the details of the initiative and what the money will be spent on. || $500 USD<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Chapter Chapters]||Local Chapter Meeting|| Bringing great speakers to local chapters continues to be a priority of the organization. Although there are opportunities for remote participation and speakers, face to face contact and engagement is a catalyst to inject enthusiasm and energy into a local area. <br>Note: If you're looking for OWASP merchandise for chapters you can submit on the [https://www.owasp.org/index.php/OWASP_Merchandise merchandise page]|| $500 USD<br />
|-<br />
| [https://www.owasp.org/index.php/OWASP_Chapter Chapters]||Multiple Chapter Meeting Engagement||Through coordination of several local chapters, it is possible to ignite an entire geographic region through a series of presentations at several local chapters in a relatively short period of time.||$1000 USD<br />
|-<br />
| Outreach||Outreach Speaking Engagement (Non OWASP Conference)|| Presenting an introduction to OWASP at events that are attended by professionals who will benefit from awareness of software security builds our global community and spreads security awareness.||$500 USD<br />
|-<br />
|Outreach||Non - OWASP Event Outreach (OWASP Representation usually a booth or stand)|| Physical representation of the OWASP Foundation at conferences managed by other organizations provides opportunities to engage individuals and companies through visual, tangible, and verbal communication. This also included funding for merchandise to support the booth. ||$500 USD<br />
|-<br />
|[https://www.owasp.org/index.php/Category:OWASP_Project Project] || OWASP Track or Summit || Project Leader that is an accepted speaker taking part in the Open Source Showcase, the OWASP Project Talks, or leading an OWASP Summit Session at the conference they are asking to attend with OWASP Track funding. Preference given to Leaders traveling from the same region that the Global AppSec Conference is taking place in. ||$1000 USD<br />
|-<br />
|[https://www.owasp.org/index.php/Category:OWASP_Project Project] || Project Engagement Funding|| Funding for marketing, graphic design, website hosting, or other project related expenses. [https://docs.google.com/a/owasp.org/document/d/15XuKIezpBpNH4BQYwSJ8i9125ga8IBE0IpvkO14RukI/edit Details] ||$500 USD<br />
|-<br />
|Chapter/Project/Outreach/Initiative || Merchandise || OWASP branded merchandise used to promote OWASP through a booth at a non-owasp event, chapter meeting, or other community building opportunity ||$500 USD<br />
|}<br />
<br />
==Community Engagement Funding Rules==<br />
<br />
The following rules apply for community engagement funding:<br />
* Funding opportunities are available to chapter or project leaders and active OWASP members.<br />
* All funding requests MUST be pre-approved. This is necessary for global budgeting. <br />
*Requested funds will first be deducted from the local chapter or project budget.<br />
*A chapter or project without sufficient funds may request funding from the foundation "Community Engagement" budget. These funds are available on a first come-first serve basis.<br />
*The standard funding thresholds are listed above based on the type of activity.<br />
<br />
<br />
*<strong>Community Engagement funds cannot be used by speakers to attend OWASP conferences</strong>. Under extreme circumstances an exception may be requested by [https://owasporg.atlassian.net/servicedesk/customer/portal/7/group/18/create/72 Contacting Us].<br />
<br />
===Additional Resources===<br />
<br />
View [https://www.owasp.org/index.php/Community_Engagement_-_Payments Community Engagement Payments]<br />
<br />
Your Chapter/Project Balances:<br />
* [https://docs.google.com/spreadsheets/d/1IMffcRayAKSr1DdkVs4xf2M2X3C7kB0JdJQ6GL7Yf18/edit?usp=sharing Chapter and Project Transactions] .<br />
<br />
<br />
<br />
__NOTOC__</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Russia&diff=255958Russia2019-11-05T18:58:47Z<p>Hblankenship: Redirected page to Moscow</p>
<hr />
<div>#REDIRECT [[Moscow]]<br />
{{Inactive Chapter}}<br />
<br />
__NOTOC__<br />
= Добро пожаловать на страницу российского отделения OWASP! =<br />
<br />
[[File:500px-Owasp_ru_logo1.png|350x350px]]<br />
<br />
Открытый проект по обеспечению безопасности веб-приложений (OWASP) представляет собой некоммерческий (501c3), образовательный, благотворительный фонд, помогающий организациям начать проектировать, разрабатывать, приобретать, использовать и поддерживать безопасное ПО. Все инструменты, документы, форумы и отделения OWASP являются бесплатными и открытыми для тех, кто заинтересован в улучшении безопасности приложений.<br />
<br />
== События и встречи ==<br />
Регистрация на будущие встречи российского отделения OWASP, а также информация о прошедших мероприятиях публикуется [https://www.meetup.com/OWASP-Russia на нашей странице в сервисе Meetup.com]. Презентации доступны в [https://speakerdeck.com/owasprussia Speaker Deck], а видеозаписи докладов можно найти на [https://vimeo.com/owasprussia Vimeo]. Чтобы следить за последними новостями подписывайтесь:<br />
<br />
{| border="0" cellpadding="5"<br />
|-<br />
| [[File:Telegram 48.png|32x32px|link=https://t.me/OWASP_RU]]<br />
| [[File:Vimeo 48.png|32x32px|link=https://vimeo.com/owasprussia]]<br />
| [[File:Speakerdeck 48.png|32x32px|link=https://speakerdeck.com/owasprussia]]<br />
| [[File:Meetup 48.png|32x32px|link=https://www.meetup.com/OWASP-Russia]]<br />
| [[File:Twitter48.png|32x32px|link=https://twitter.com/owasp_ru]] <br />
|}<br />
<br />
=== Выступить на будущей встрече ===<br />
У вас есть интересная тема для выступления на одной из будущих встреч российского отделения OWASP? Отлично! Заполните [https://forms.gle/TbVyXNdobSKMSMZ29 форму подачи заявки].<br />
<br />
== Команда российского отделения OWASP==<br />
<br />
* [[User:Taras_Ivashchenko|Тарас Иващенко]], руководитель российского отделения OWASP<br />
* [mailto:luka.safonov@owasp.org Лука Сафонов]<br />
* [mailto:boris.savkov@owasp.org Борис Савков]<br />
<br />
== Присоединиться ==<br />
<br />
Существует множество способов принять участие в жизни российского отделения OWASP:<br />
<br />
* Участие в любом из активных [http://www.owasp.org/index.php/Category:OWASP_Project проектов] (в т.ч. написание утилит и документации)<br />
* Предложение новых проектов<br />
* Переводы существующих проектов на русский язык<br />
* Помощь в организации конференций и встреч<br />
* Продвижение и поддержка проекта OWASP в целом<br />
<br />
== Поддержать ==<br />
Хотели бы помочь развитию OWASP Russia и стать "Local Chapter Supporter"? Больше информации [https://www.owasp.org/index.php/Local_Chapter_Supporter здесь].<br />
<br />
{{Chapter Template|chaptername=Russia|extra=The chapter leader is [[User:Taras_Ivashchenko|Taras Ivaschenko]]<br />
|mailinglistsite=https://groups.google.com/a/owasp.org/forum/#!forum/russia-chapter}}<br />
<br />
[[Category:OWASP Chapter]] <br />
[[Category:Europe]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Moscow&diff=255957Moscow2019-11-05T18:57:16Z<p>Hblankenship: Blanked the page</p>
<hr />
<div></div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User:Adjonyo.kodzo&diff=255952User:Adjonyo.kodzo2019-11-05T14:14:12Z<p>Hblankenship: Creating user page for new user.</p>
<hr />
<div>Diploma: Master in Sciences and Technologies.<br />
<br />
Certifications: NPCA, CCNA, CCNA Security, CCNA collaboration, CVNS, Prince2, ITIL, ISO 27001, CEH10.<br />
<br />
CISO in a BANK.<br />
<br />
Professional Experience: 15 years.<br />
Im currently information systems teacher at University.<br />
<br />
Im available anytime to help promoting web applications security everywhere in the world, in africa and in my country Togo</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User_talk:Adjonyo.kodzo&diff=255953User talk:Adjonyo.kodzo2019-11-05T14:14:12Z<p>Hblankenship: Welcome!</p>
<hr />
<div>'''Welcome to ''OWASP''!'''<br />
We hope you will contribute much and well.<br />
You will probably want to read the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents help pages].<br />
Again, welcome and have fun! [[User:Hblankenship|Hblankenship]] ([[User talk:Hblankenship|talk]]) 08:14, 5 November 2019 (CST)</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=National_Institute_of_Technology_Tiruchirappalli&diff=255935National Institute of Technology Tiruchirappalli2019-11-04T18:19:19Z<p>Hblankenship: </p>
<hr />
<div><h1 style="color:orange;">'''STUDENT CHAPTER'''<br />
</h1><br />
{{Chapter Template|chaptername=National Institute of Technology Tiruchirappali|extra=The chapter leaders are [mailto:raj.sureja@owasp.org Raj Sureja], [mailto:anshuman.agrawalis@owasp.org Anshuman Agrawalis] and [mailto:pranav.satish@owasp.org Pranav Satish]<br />
|meetupurl=CHANGEME|region=Asia/Pacific/Middle East}}<br />
<br />
== Local News ==<br />
<br />
'''Meeting Location'''<br />
<br />
Everyone is welcome to join us at our chapter meetings.<br />
<br />
[[Category:OWASP Chapter]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=National_Institute_of_Technology_Tiruchirappalli&diff=255934National Institute of Technology Tiruchirappalli2019-11-04T18:18:47Z<p>Hblankenship: </p>
<hr />
<div><h1>'''STUDENT CHAPTER'''<br />
</h1><br />
{{Chapter Template|chaptername=National Institute of Technology Tiruchirappali|extra=The chapter leaders are [mailto:raj.sureja@owasp.org Raj Sureja], [mailto:anshuman.agrawalis@owasp.org Anshuman Agrawalis] and [mailto:pranav.satish@owasp.org Pranav Satish]<br />
|meetupurl=CHANGEME|region=Asia/Pacific/Middle East}}<br />
<br />
== Local News ==<br />
<br />
'''Meeting Location'''<br />
<br />
Everyone is welcome to join us at our chapter meetings.<br />
<br />
[[Category:OWASP Chapter]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=OWASP_Risk_Rating_Management&diff=255931OWASP Risk Rating Management2019-11-04T17:42:24Z<p>Hblankenship: </p>
<hr />
<div>{|<br />
|-<br />
! width="700" align="center" | <br> <br />
! width="500" align="center" | <br><br />
|-<br />
| align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]] <br />
| align="right" | <br />
<br />
|}<br />
=Main=<br />
<br />
<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div><br />
<br />
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-<br />
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |<br />
<br />
<br />
'''OWASP Risk Rating Management Project'''<br />
<br />
OWASP Risk Rating Management Project is a framework projects aim to educate user who want to assessment web application using owasp risk rating model.<br />
<br />
==OWASP Project Template==<br />
<br />
'''OWASP Risk Rating Management Project'''<br />
<br />
==Licensing==<br />
<span style="color:#ff0000"><br />
<br />
This program is free software: you can redistribute it and/or modify it under the terms of the [http://www.gnu.org/licenses/agpl-3.0.html link GNU Affero General Public License 3.0] as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. OWASP XXX and any contributions are Copyright &copy; by {the Project Leader(s) or OWASP} {Year(s)}. <br />
<br />
| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |<br />
<br />
== Project Resources ==<br />
<span style="color:#ff0000"><br />
<br />
<br />
== Project Leader ==<br />
<br />
* [[User:Mohammadfebri_r|Mohammad Febri Ramadlan]]<br />
<br />
<span style="color:#ff0000"><br />
<br />
</span><br />
<br />
== Related Projects ==<br />
<span style="color:#ff0000"><br />
<br />
</span><br />
* [[OWASP Risk Rating Methodology]]<br />
* [[OWASP Security Knowledge Framework]]<br />
<br />
==Classifications==<br />
<br />
{| width="200" cellpadding="2"<br />
|-<br />
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]<br />
|-<br />
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]<br />
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=Builders]] <br />
|-<br />
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]<br />
|-<br />
| colspan="2" align="center" | [[File:Agplv3-155x51.png|link=http://www.gnu.org/licenses/agpl-3.0.html|Affero General Public License 3.0]]<br />
|}<br />
<br />
| valign="top" style="padding-left:25px;width:200px;" | <br />
<br />
== News and Events ==<br />
<span style="color:#ff0000"><br />
<br />
|}<br />
<br />
=FAQs=<br />
<br />
<!-- Instructions are in RED and should be removed from your document by deleting the text with the span tags.--><br />
<span style="color:#ff0000"><br />
Many projects have "Frequently Asked Questions" documents or pages. However, the point of such a document is not the questions. ''The point of a document like this are the '''answers'''''. The document contains the answers that people would otherwise find themselves giving over and over again. The idea is that rather than laboriously compose and post the same answers repeatedly, people can refer to this page with pre-prepared answers. Use this space to communicate your projects 'Frequent Answers.'<br />
</span><br />
<br />
==How can I participate in your project?==<br />
All you have to do is make the Project Leader's aware of your available time to contribute to the project. It is also important to let the Leader's know how you would like to contribute and pitch in to help the project meet it's goals and milestones. There are many different ways you can contribute to an OWASP Project, but communication with the leads is key. <br />
<br />
==If I am not a programmer can I participate in your project?==<br />
Yes, you can certainly participate in the project if you are not a programmer or technical. The project needs different skills and expertise and different times during its development. Currently, we are looking for researchers, writers, graphic designers, and a project administrator. See the Road Map and Getting Involved tab for more details.<br />
<br />
= Acknowledgements =<br />
==Contributors==<br />
<br />
<!-- Instructions are in RED and should be removed from your document by deleting the text with the span tags.--><br />
<span style="color:#ff0000"><br />
The success of OWASP is due to a community of enthusiasts and contributors that work to make our projects great. This is also true for the success of your project. <br />
Be sure to give credit where credit is due, no matter how small! This should be a brief list of the most amazing people involved in your project. <br />
Be sure to provide a link to a complete list of all the amazing people in your project's community as well.<br />
</span><br />
<br />
The OWASP Tool Project Template is developed by a worldwide team of volunteers. A live update of project [https://github.com/OWASP/Security-Principles/graphs/contributors contributors is found here]. <br />
<br />
The first contributors to the project were:<br />
<br />
* [https://www.owasp.org/index.php/User:Clerkendweller Colin Watson] who created the OWASP Cornucopia project that the template was derived from<br />
* [https://www.owasp.org/index.php/User:Chuck_Cooper Chuck Cooper] who edited the template to convert it from a documentation project to a Tool Project Template<br />
* '''YOUR NAME BELONGS HERE AND YOU SHOULD REMOVE THE PRIOR 3 NAMES'''<br />
<br />
= Road Map and Getting Involved =<br />
<br />
https://www.owasp.org/index.php/OWASP_Risk_Rating<br />
<br />
<br />
==Roadmap==<br />
As of <strong>November, 2013, the highest priorities for the next 6 months</strong> are:<br />
<strong><br />
* Complete the first draft of the Tool Project Template<br />
* Get other people to review the Tool Project Template and provide feedback<br />
* Incorporate feedback into changes in the Tool Project Template<br />
* Finalize the Tool Project template and have it reviewed to be promoted from an Incubator Project to a Lab Project<br />
</strong><br />
<br />
Subsequent Releases will add<br />
<strong><br />
* Internationalization Support<br />
* Additional Unit Tests<br />
* Automated Regression tests<br />
</strong><br />
<br />
==Getting Involved==<br />
Involvement in the development and promotion of <strong>Tool Project Template</strong> is actively encouraged!<br />
You do not have to be a security expert or a programmer to contribute.<br />
Some of the ways you can help are as follows:<br />
<br />
===Coding===<br />
We could implement some of the later items on the roadmap sooner if someone wanted to help out with unit or automated regression tests<br />
===Localization===<br />
Are you fluent in another language? Can you help translate the text strings in the <strong>Tool Project Template</strong> into that language?<br />
===Testing===<br />
Do you have a flair for finding bugs in software? We want to product a high quality product, so any help with Quality Assurance would be greatly appreciated. Let us know if you can offer your help.<br />
===Feedback===<br />
Please use the [https://lists.owasp.org/mailman/listinfo/OWASP_Tool_Project_Template Tool Project Template project mailing list] for feedback about:<br />
<ul><br />
<li>What do like?</li><br />
<li>What don't you like?</li><br />
<li>What features would you like to see prioritized on the roadmap?</li><br />
</ul><br />
<br />
=Minimum Viable Product=<br />
<!-- Instructions are in RED and should be removed from your document by deleting the text with the span tags.--><br />
<span style="color:#ff0000"><br />
This page is where you should indicate what is the minimum set of functionality that is required to make this a useful product that addresses your core security concern.<br />
Defining this information helps the project leader to think about what is the critical functionality that a user needs for this project to be useful, thereby helping determine what the priorities should be on the roadmap. And it also helps reviewers who are evaluating the project to determine if the functionality sufficiently provides the critical functionality to determine if the project should be promoted to the next project category. <br />
</span><br />
<br />
The Tool Project Template must specify the minimum set of tabs a project should have, provide some an example layout on each tab, provide instructional text on how a project leader should modify the tab, and give some example text that illustrates how to create an actual project.<br />
<br />
It would also be ideal if the sample text was translated into different languages.<br />
<br />
=Project About=<br />
Addtional Instructions for making changes:<br />
<br />
The About 'tab' on that page is done with a MediaWiki template. If you log into the wiki page for your project and click the "Edit" button/link/tab in the top-right between 'Read' and 'View History', you'll see the edit page for the main body of your project page.<br />
<br />
If you scroll down below the form to edit that page (below the "Save page", "Show preview", "Show changes" buttons, you'll see some text with a triangle in front of it reading "Templates used on this page:" A list will expand if you click on the triangle/text to show the templates that make up this page. The one you want is the "Projects/OWASP Example Project About Page" - click the (edit) next to this to edit that template. The direct link is: https://www.owasp.org/index.php?title=Projects/OWASP_Example_Project_About_Page&action=edit<br />
<br />
The template takes 'input' that are key/value pairs where you'll need to edit the stuff after the equals (=) like:<br />
project_name =Place your project name here. <br />
<br />
You'd edit the bold bit.<br />
<br />
<!-- Instructions are in RED and should be removed from your document by deleting the text with the span tags.--><br />
<span style="color:#ff0000"><br />
This page is where you need to place your legacy project template page if your project was created before October 2013. To edit this page you will need to edit your project information template. You can typically find this page by following this address and substituting your project name where it says "OWASP_Example_Project". When in doubt, ask the OWASP Projects Manager. <br />
Example template page: https://www.owasp.org/index.php/Projects/OWASP_Example_Project<br />
</span><br />
<br />
{{:Projects/OWASP_Example_Project_About_Page}} <br />
<br />
__NOTOC__ <headertabs /> <br />
<br />
[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User:Mpahl&diff=255929User:Mpahl2019-11-04T17:29:04Z<p>Hblankenship: Creating user page for new user.</p>
<hr />
<div>I served in the US Military as a Signals Analyst, followed by time in the government.<br />
<br />
I currently serve as an InfoSec Vulnerability Manager for a major airline. I possess a Master of Science in Cyber Security and Information Assurance. I hold the CHFI and CEH certificates, and am currently studying for OSCP.<br />
<br />
I am interested in Frameworks, penetration testing, signals analysis, and blockchain and distributed ledger technologies.</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User_talk:Mpahl&diff=255930User talk:Mpahl2019-11-04T17:29:04Z<p>Hblankenship: Welcome!</p>
<hr />
<div>'''Welcome to ''OWASP''!'''<br />
We hope you will contribute much and well.<br />
You will probably want to read the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents help pages].<br />
Again, welcome and have fun! [[User:Hblankenship|Hblankenship]] ([[User talk:Hblankenship|talk]]) 11:29, 4 November 2019 (CST)</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=OWASP_Security_Busters&diff=255928OWASP Security Busters2019-11-04T15:08:17Z<p>Hblankenship: </p>
<hr />
<div><div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div><br />
<br />
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-<br />
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |<br />
<br />
<span style="color:#ff0000"><br />
Instructions are in RED text and should be removed from your document by deleting the text with the span tags. This document is intended to serve as an example of what is required of an OWASP project wiki page. The text in red serves as instructions, while the text in black serves as an example. Text in black is expected to be replaced entirely with information specific to your OWASP project.<br />
</span><br />
==Project About==<br />
<span style="color:#ff0000"><br />
{{:Template:Project About<br />
|project_name=Security Busters<br />
|leader_name1=Shruti Kulkarni<br />
|leader_email1=shruti.kulkarni@owasp.org<br />
|leader__name2=Stefano Belloro<br />
|leader__email2=Stefano.belloro@gmail.com<br />
|leader__name3=Alexios Mylonas<br />
|leader__email3=alexios.mylonas@owasp.org<br />
}}<br />
<br />
==OWASP Documentation Project Template==<br />
<span style="color:#ffffff"><br />
<br />
<br />
The main deliverable of this project would be an assessment of the current privacy protection that is offered by popular web browsers for mobile devices (Android, iOS) and desktops. We will document amongst other things the following:<br />
a. browser details: name, version number, underlying OS<br />
<br />
b. Protection against tracking mechanism, Tracking mechanism used (other than cookie)<br />
<br />
c. Capability and usability in removing the tracking mechanism<br />
<br />
d. Capability of the browser to show/list the data from the tracking mechanism<br />
<br />
e. Presence of addons that list/delete the data<br />
<br />
==Description==<br />
<span style="color:#ffffff"><br />
<br />
This project would look at different browsers that are used by general population and understand the tracking mechanisms (other than cookies) employed by the browser. These tracking mechanisms are not visible like cookies and need to be explored by getting into developer tools on the browser<br />
This sort of tracking has an impact on privacy and to some extent on security. <br />
This project would also look at how these tracking mechanisms can be removed or at least how the contents of these tracking mechanisms can be deleted<br />
<br />
==Licensing==<br />
<span style="color:#ffffff"><br />
<br />
<br />
GNU General Public License<br />
<br />
==Roadmap==<br />
<span style="color:#ffffff"><br />
<br />
<br />
Q3, 2019<br />
* Start of the project<br />
* Identify team members<br />
* Design testbed (use of vms, use of phones)<br />
* Identify different browsers and their versions for testing<br />
<br />
Q4, 2019<br />
<br />
* Implement testbed<br />
* Install browsers on VMS<br />
* Commence testing and document the results<br />
* Publicize the results on the wiki<br />
<br />
The plan to start by replicating the experiments/methodology that is found here: <br />
Belloro, S., & Mylonas, A. (2018). I know what you did last summer: New persistent tracking mechanisms in the wild. IEEE Access, 6, 52779-52792.<br />
, and has been presented by Alexios to the London Chapter meeting in November 2018. Then, we plan to expand the work by including other tracking technologies and third-party software (i.e. addons) that can be used to enhance the protection that is offered by current browsers.<br />
<br />
==Getting Involved==<br />
<span style="color:#ffffff"><br />
<br />
<br />
Involvement in the development and promotion of <strong>Security busters</strong> is actively encouraged!<br />
You do not have to be a security expert or a programmer to contribute.<br />
Some of the ways you can help are as follows:<br />
1. Share the name of the browser on which you have noticed privacy issues<br />
2. Let us know if you have identified any databases that store user information<br />
<br />
| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |<br />
<br />
== Project Resources ==<br />
<span style="color:#ff0000"><br />
This is where you can link to the key locations for project files, including setup programs, the source code repository, online documentation, a Wiki Home Page, threaded discussions about the project, and Issue Tracking system, etc. <br />
</span><br />
<br />
[https://github.com/SamanthaGroves Installation Package]<br />
<br />
[https://github.com/SamanthaGroves Source Code]<br />
<br />
[https://github.com/SamanthaGroves What's New (Revision History)]<br />
<br />
[https://github.com/SamanthaGroves Documentation]<br />
<br />
[https://github.com/SamanthaGroves Wiki Home Page]<br />
<br />
[https://github.com/SamanthaGroves Issue Tracker]<br />
<br />
[https://github.com/SamanthaGroves Slide Presentation]<br />
<br />
[https://github.com/SamanthaGroves Video]<br />
<br />
== Project Leader ==<br />
<span style="color:#ffffff"><br />
[mailto://shruti.kulkarni@owasp.org Shruti Kulkarni]<br />
<br />
[mailto://stefano.belloro@gmail.com Stefano Belloro]<br />
<br />
[mailto://alexios.mylonas@owasp.org Alexios Mylonas]<br />
<br />
== Related Projects ==<br />
<span style="color:#ff0000"><br />
This is where you can link to other OWASP Projects that are similar to yours. <br />
</span><br />
* [[OWASP_Code_Project_Template]]<br />
* [[OWASP_Tool_Project_Template]]<br />
<br />
==Classifications==<br />
<br />
{| width="200" cellpadding="2"<br />
|-<br />
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Document]]<br />
|-<br />
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]<br />
|-<br />
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]<br />
|-<br />
| colspan="2" align="center" | [[File:Agplv3-155x51.png|link=http://www.gnu.org/licenses/agpl-3.0.html|GNU General Public License 3.0]]<br />
|}<br />
|}<br />
<br />
__NOTOC__ <headertabs /> <br />
<br />
[[Category:OWASP Project]] [[Category:OWASP_Document]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Category:Vulnerability_Scanning_Tools&diff=255802Category:Vulnerability Scanning Tools2019-10-29T16:48:21Z<p>Hblankenship: </p>
<hr />
<div>== Description ==<br />
<br />
Web Application Vulnerability Scanners are automated tools that scan web applications, normally from the outside, to look for security vulnerabilities such as [[Cross-site scripting]], [[SQL Injection]], [[Command Injection]], [[Path Traversal]] and insecure server configuration. This category of tools is frequently referred to as [https://www.techopedia.com/definition/30958/dynamic-application-security-testing-dast Dynamic Application Security Testing] (DAST) Tools. A large number of both commercial and open source tools of this type are available and all of these tools have their own strengths and weaknesses. If you are interested in the effectiveness of DAST tools, check out the OWASP [[Benchmark]] project, which is scientifically measuring the effectiveness of all types of vulnerability detection tools, including DAST.<br />
<br />
Here we provide a list of vulnerability scanning tools currently available in the market.<br />
<br />
<br> '''Disclaimer:''' The tools listing in the table below are presented in alphabetical order. <b>OWASP does not endorse any of the Vendors or Scanning Tools by listing them in the table below. We have made every effort to provide this information as accurately as possible. If you are the vendor of a tool below and think this information is incomplete or incorrect, please send an e-mail to our [mailto:owasp_ha_vulnerability_scanner_project@lists.owasp.org mailing list] and we will make every effort to correct this information.</b><br />
<br />
OWASP is aware of the [http://sectooladdict.blogspot.com/ '''Web Application Vulnerability Scanner Evaluation Project (WAVSEP)'''. WAVSEP] is completely unrelated to OWASP and we do not endorse its results, nor any of the DAST tools it evaluates. However, the results provided by WAVSEP may be helpful to someone interested in researching or selecting free and/or commercial DAST tools for their projects. This project has far more detail on DAST tools and their features than this OWASP DAST page.<br />
<br />
== Tools Listing ==<br />
<br />
{{:Template:OWASP Tool Headings}}<br />
{{OWASP Tool Info || tool_name = [https://misterscanner.com/ Abbey Scan] || tool_owner = MisterScanner || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.acunetix.com/ Acunetix WVS] || tool_owner = Acunetix || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.ibm.com/us-en/marketplace/application-security-on-cloud Application Security on Cloud] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www-03.ibm.com/software/products/en/appscan-standard AppScan] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/Products/Application-Security/App-Scanner-Family/App-Scanner-Enterprise/ App Scanner] || tool_owner = Trustwave || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/appspider/ AppSpider] || tool_owner = Rapid7 || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://apptrana.indusface.com/basic/ AppTrana Website Security Scan] || tool_owner = AppTrana || tool_licence = Free || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.arachni-scanner.com/ Arachni] || tool_owner = Arachni|| tool_licence = Free for most use cases || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.scanmyserver.com/ AVDS] || tool_owner = Beyond Security || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.blueclosure.com BlueClosure BC Detect] || tool_owner = BlueClosure || tool_licence = Commercial, 2 weeks trial || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.breachlock.com/dynamic-application-security-testing/ BREACHLOCK Dynamic Application Security Testing] || tool_owner = BREACHLOCK || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.portswigger.net/ Burp Suite] || tool_owner = PortSwiger || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Most platforms supported }}<br />
{{OWASP Tool Info || tool_name = [https://contrastsecurity.com Contrast] || tool_owner = Contrast Security || tool_licence = Commercial / Free (Full featured for 1 App) || tool_platforms = SaaS or On-Premises }}<br />
{{OWASP Tool Info || tool_name = [https://detectify.com/ Detectify] || tool_owner = Detectify || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.digifort.se/en/scanner Digifort- Inspect] || tool_owner = Digifort|| tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.edgescan.com/ edgescan] || tool_owner = edgescan|| tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.gamasec.com/Gamascan.aspx GamaScan] || tool_owner = GamaSec || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://rgaucher.info/beta/grabber/ Grabber] || tool_owner = Romain Gaucher || tool_licence = Open Source || tool_platforms = Python 2.4, BeautifulSoup and PyXML}}<br />
{{OWASP Tool Info || tool_name = [https://gravityscan.com/ Gravityscan] || tool_owner = Defiant, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://sourceforge.net/p/grendel/code/ci/c59780bfd41bdf34cc13b27bc3ce694fd3cb7456/tree/ Grendel-Scan] || tool_owner = David Byrne || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.golismero.com GoLismero] || tool_owner = GoLismero Team || tool_licence = GPLv2.0 || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.ikare-monitoring.com/ IKare] || tool_owner = ITrust || tool_licence = Commercial || tool_platforms = N/A }}<br />
{{OWASP Tool Info || tool_name = [https://www.htbridge.com/immuniweb/ ImmuniWeb] || tool_owner = High-Tech Bridge || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.rapid7.com/products/insightvm/ InsightVM] || tool_ownder = Rapid7 || tool_licence = Commercial with Free Trial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.intruder.io Intruder] || tool_owner = Intruder Ltd. || tool_license = Commercial || tool_platorms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.indusface.com/index.php/products/web-application-scanning Indusface Web Application Scanning] || tool_owner = Indusface || tool_licence = Commercial / Free Trial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.nstalker.com/ N-Stealth] || tool_owner = N-Stalker || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.tenable.com/products/tenable-io/web-application-scanning/ Nessus] || tool_owner = Tenable || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.mavitunasecurity.com/ Netsparker] || tool_owner = MavitunaSecurity || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/nexpose-community-edition.jsp Nexpose] || tool_owner = Rapid7 || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Windows/Linux}}<br />
{{OWASP Tool Info || tool_name = [http://www.cirt.net/nikto2 Nikto] || tool_owner = CIRT || tool_licence = Open Source|| tool_platforms = Unix/Linux}}<br />
{{OWASP Tool Info || tool_name = [https://probely.com Probely] || tool_owner = Probely || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/proxy.html Proxy.app] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.qualys.com/products/qg_suite/was/ QualysGuard] || tool_owner = Qualys || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.beyondtrust.com/Products/RetinaNetworkSecurityScanner/ Retina] || tool_owner = BeyondTrust || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.orvant.com Securus] || tool_owner = Orvant, Inc || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.whitehatsec.com/home/services/services.html Sentinel] || tool_owner = WhiteHat Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.parasoft.com/products/article.jsp?articleId=3169&redname=webtesting&referred=webtesting SOATest] || tool_owner = Parasoft || tool_licence = Commercial || tool_platforms = Windows / Linux / Solaris}}<br />
{{OWASP Tool Info || tool_name = [https://www.tinfoilsecurity.com Tinfoil Security] || tool_owner = Tinfoil Security, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS or On-Premises}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/external-vulnerability-scanning.php Trustkeeper Scanner] || tool_owner = Trustwave SpiderLabs || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://subgraph.com/vega/ Vega] || tool_owner = Subgraph || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.ubsecure.jp/en/about_ubsecure Vex] || tool_owner = UBsecure || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://wapiti.sourceforge.net/ Wapiti] || tool_owner = Informática Gesfor || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.defensecode.com/webscanner.php Web Security Scanner] || tool_owner = DefenseCode || tool_licence = Commercial || tool_platforms = On-Premises}}<br />
{{OWASP Tool Info || tool_name = [http://www.tripwire.com/it-security-software/enterprise-vulnerability-management/web-application-vulnerability-scanning/ WebApp360] || tool_owner = TripWire || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://webcookies.org WebCookies] || tool_owner = WebCookies || tool_licence = Free|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.microfocus.com/en-us/products/webinspect-dynamic-analysis-dast WebInspect] || tool_owner = Micro Focus || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/webreaver.html WebReaver] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.german-websecurity.com/en/products/webscanservice/product-details/overview/ WebScanService] || tool_owner = German Web Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [https://suite.websecurify.com/ Websecurify Suite] || tool_owner = Websecurify || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows, Linux, Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.sensepost.com/research/wikto/ Wikto] || tool_owner = Sensepost || tool_licence = Open Source || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.w3af.org/ w3af] || tool_owner = w3af.org || tool_licence = GPLv2.0 || tool_platforms = Linux and Mac}}<br />
{{OWASP Tool Info || tool_name = [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Zed Attack Proxy] || tool_owner = OWASP || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
|}<br />
<br />
== References ==<br />
<br />
*[[Source_Code_Analysis_Tools | SAST Tools]] - OWASP page with similar information on Static Application Security Testing (SAST) Tools<br />
*[[Free for Open Source Application Security Tools]] - OWASP page that lists the Commercial Dynamic Application Security Testing (DAST) tools we know of that are free for Open Source<br />
*http://sectooladdict.blogspot.com/ - Web Application Vulnerability Scanner Evaluation Project (WAVSEP)<br />
*http://projects.webappsec.org/Web-Application-Security-Scanner-Evaluation-Criteria - v1.0 (2009)<br />
*http://www.slideshare.net/lbsuto/accuracy-and-timecostsofwebappscanners - White Paper: Analyzing the Accuracy and Time Costs of WebApplication Security Scanners - By Larry Suto (2010)<br />
*http://samate.nist.gov/index.php/Web_Application_Vulnerability_Scanners.html - NIST home page which links to: NIST Special Publication 500-269: Software Assurance Tools: Web Application Security Scanner Functional Specification Version 1.0 (21 August, 2007)<br />
*http://www.softwareqatest.com/qatweb1.html#SECURITY - A list of Web Site Security Test Tools. (Has both DAST and SAST tools)<br />
<br />
[[Category:OWASP_Tools_Project]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Category:Vulnerability_Scanning_Tools&diff=255801Category:Vulnerability Scanning Tools2019-10-29T16:46:07Z<p>Hblankenship: </p>
<hr />
<div>== Description ==<br />
<br />
Web Application Vulnerability Scanners are automated tools that scan web applications, normally from the outside, to look for security vulnerabilities such as [[Cross-site scripting]], [[SQL Injection]], [[Command Injection]], [[Path Traversal]] and insecure server configuration. This category of tools is frequently referred to as [https://www.techopedia.com/definition/30958/dynamic-application-security-testing-dast Dynamic Application Security Testing] (DAST) Tools. A large number of both commercial and open source tools of this type are available and all of these tools have their own strengths and weaknesses. If you are interested in the effectiveness of DAST tools, check out the OWASP [[Benchmark]] project, which is scientifically measuring the effectiveness of all types of vulnerability detection tools, including DAST.<br />
<br />
Here we provide a list of vulnerability scanning tools currently available in the market.<br />
<br />
<br> '''Disclaimer:''' The tools listing in the table below are presented in alphabetical order. <b>OWASP does not endorse any of the Vendors or Scanning Tools by listing them in the table below. We have made every effort to provide this information as accurately as possible. If you are the vendor of a tool below and think this information is incomplete or incorrect, please send an e-mail to our [mailto:owasp_ha_vulnerability_scanner_project@lists.owasp.org mailing list] and we will make every effort to correct this information.</b><br />
<br />
OWASP is aware of the [http://sectooladdict.blogspot.com/ '''Web Application Vulnerability Scanner Evaluation Project (WAVSEP)'''. WAVSEP] is completely unrelated to OWASP and we do not endorse its results, nor any of the DAST tools it evaluates. However, the results provided by WAVSEP may be helpful to someone interested in researching or selecting free and/or commercial DAST tools for their projects. This project has far more detail on DAST tools and their features than this OWASP DAST page.<br />
<br />
== Tools Listing ==<br />
<br />
{{:Template:OWASP Tool Headings}}<br />
{{OWASP Tool Info || tool_name = [https://misterscanner.com/ Abbey Scan] || tool_owner = MisterScanner || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.acunetix.com/ Acunetix WVS] || tool_owner = Acunetix || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.ibm.com/us-en/marketplace/application-security-on-cloud Application Security on Cloud] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www-03.ibm.com/software/products/en/appscan-standard AppScan] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/Products/Application-Security/App-Scanner-Family/App-Scanner-Enterprise/ App Scanner] || tool_owner = Trustwave || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/appspider/ AppSpider] || tool_owner = Rapid7 || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://apptrana.indusface.com/basic/ AppTrana Website Security Scan] || tool_owner = AppTrana || tool_licence = Free || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.arachni-scanner.com/ Arachni] || tool_owner = Arachni|| tool_licence = Free for most use cases || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.scanmyserver.com/ AVDS] || tool_owner = Beyond Security || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.blueclosure.com BlueClosure BC Detect] || tool_owner = BlueClosure || tool_licence = Commercial, 2 weeks trial || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.breachlock.com/dynamic-application-security-testing/ BREACHLOCK Dynamic Application Security Testing] || tool_owner = BREACHLOCK || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.portswigger.net/ Burp Suite] || tool_owner = PortSwiger || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Most platforms supported }}<br />
{{OWASP Tool Info || tool_name = [https://contrastsecurity.com Contrast] || tool_owner = Contrast Security || tool_licence = Commercial / Free (Full featured for 1 App) || tool_platforms = SaaS or On-Premises }}<br />
{{OWASP Tool Info || tool_name = [https://detectify.com/ Detectify] || tool_owner = Detectify || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.digifort.se/en/scanner Digifort- Inspect] || tool_owner = Digifort|| tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.edgescan.com/ edgescan] || tool_owner = edgescan|| tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.gamasec.com/Gamascan.aspx GamaScan] || tool_owner = GamaSec || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://rgaucher.info/beta/grabber/ Grabber] || tool_owner = Romain Gaucher || tool_licence = Open Source || tool_platforms = Python 2.4, BeautifulSoup and PyXML}}<br />
{{OWASP Tool Info || tool_name = [https://gravityscan.com/ Gravityscan] || tool_owner = Defiant, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://sourceforge.net/p/grendel/code/ci/c59780bfd41bdf34cc13b27bc3ce694fd3cb7456/tree/ Grendel-Scan] || tool_owner = David Byrne || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.golismero.com GoLismero] || tool_owner = GoLismero Team || tool_licence = GPLv2.0 || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.ikare-monitoring.com/ IKare] || tool_owner = ITrust || tool_licence = Commercial || tool_platforms = N/A }}<br />
{{OWASP Tool Info || tool_name = [https://www.htbridge.com/immuniweb/ ImmuniWeb] || tool_owner = High-Tech Bridge || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.rapid7.com/products/insightvm/ InsightVM] || tool_ownder = Rapid7 || tool_licence = Commercial with Free Trial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.indusface.com/index.php/products/web-application-scanning Indusface Web Application Scanning] || tool_owner = Indusface || tool_licence = Commercial / Free Trial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.nstalker.com/ N-Stealth] || tool_owner = N-Stalker || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.tenable.com/products/tenable-io/web-application-scanning/ Nessus] || tool_owner = Tenable || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.mavitunasecurity.com/ Netsparker] || tool_owner = MavitunaSecurity || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/nexpose-community-edition.jsp Nexpose] || tool_owner = Rapid7 || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Windows/Linux}}<br />
{{OWASP Tool Info || tool_name = [http://www.cirt.net/nikto2 Nikto] || tool_owner = CIRT || tool_licence = Open Source|| tool_platforms = Unix/Linux}}<br />
{{OWASP Tool Info || tool_name = [https://probely.com Probely] || tool_owner = Probely || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/proxy.html Proxy.app] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.qualys.com/products/qg_suite/was/ QualysGuard] || tool_owner = Qualys || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.beyondtrust.com/Products/RetinaNetworkSecurityScanner/ Retina] || tool_owner = BeyondTrust || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.orvant.com Securus] || tool_owner = Orvant, Inc || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.whitehatsec.com/home/services/services.html Sentinel] || tool_owner = WhiteHat Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.parasoft.com/products/article.jsp?articleId=3169&redname=webtesting&referred=webtesting SOATest] || tool_owner = Parasoft || tool_licence = Commercial || tool_platforms = Windows / Linux / Solaris}}<br />
{{OWASP Tool Info || tool_name = [https://www.tinfoilsecurity.com Tinfoil Security] || tool_owner = Tinfoil Security, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS or On-Premises}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/external-vulnerability-scanning.php Trustkeeper Scanner] || tool_owner = Trustwave SpiderLabs || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://subgraph.com/vega/ Vega] || tool_owner = Subgraph || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.ubsecure.jp/en/about_ubsecure Vex] || tool_owner = UBsecure || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://wapiti.sourceforge.net/ Wapiti] || tool_owner = Informática Gesfor || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.defensecode.com/webscanner.php Web Security Scanner] || tool_owner = DefenseCode || tool_licence = Commercial || tool_platforms = On-Premises}}<br />
{{OWASP Tool Info || tool_name = [http://www.tripwire.com/it-security-software/enterprise-vulnerability-management/web-application-vulnerability-scanning/ WebApp360] || tool_owner = TripWire || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://webcookies.org WebCookies] || tool_owner = WebCookies || tool_licence = Free|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.microfocus.com/en-us/products/webinspect-dynamic-analysis-dast WebInspect] || tool_owner = Micro Focus || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/webreaver.html WebReaver] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.german-websecurity.com/en/products/webscanservice/product-details/overview/ WebScanService] || tool_owner = German Web Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [https://suite.websecurify.com/ Websecurify Suite] || tool_owner = Websecurify || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows, Linux, Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.sensepost.com/research/wikto/ Wikto] || tool_owner = Sensepost || tool_licence = Open Source || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.w3af.org/ w3af] || tool_owner = w3af.org || tool_licence = GPLv2.0 || tool_platforms = Linux and Mac}}<br />
{{OWASP Tool Info || tool_name = [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Zed Attack Proxy] || tool_owner = OWASP || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
|}<br />
<br />
== References ==<br />
<br />
*[[Source_Code_Analysis_Tools | SAST Tools]] - OWASP page with similar information on Static Application Security Testing (SAST) Tools<br />
*[[Free for Open Source Application Security Tools]] - OWASP page that lists the Commercial Dynamic Application Security Testing (DAST) tools we know of that are free for Open Source<br />
*http://sectooladdict.blogspot.com/ - Web Application Vulnerability Scanner Evaluation Project (WAVSEP)<br />
*http://projects.webappsec.org/Web-Application-Security-Scanner-Evaluation-Criteria - v1.0 (2009)<br />
*http://www.slideshare.net/lbsuto/accuracy-and-timecostsofwebappscanners - White Paper: Analyzing the Accuracy and Time Costs of WebApplication Security Scanners - By Larry Suto (2010)<br />
*http://samate.nist.gov/index.php/Web_Application_Vulnerability_Scanners.html - NIST home page which links to: NIST Special Publication 500-269: Software Assurance Tools: Web Application Security Scanner Functional Specification Version 1.0 (21 August, 2007)<br />
*http://www.softwareqatest.com/qatweb1.html#SECURITY - A list of Web Site Security Test Tools. (Has both DAST and SAST tools)<br />
<br />
[[Category:OWASP_Tools_Project]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Category:Vulnerability_Scanning_Tools&diff=255800Category:Vulnerability Scanning Tools2019-10-29T16:33:11Z<p>Hblankenship: </p>
<hr />
<div>== Description ==<br />
<br />
Web Application Vulnerability Scanners are automated tools that scan web applications, normally from the outside, to look for security vulnerabilities such as [[Cross-site scripting]], [[SQL Injection]], [[Command Injection]], [[Path Traversal]] and insecure server configuration. This category of tools is frequently referred to as [https://www.techopedia.com/definition/30958/dynamic-application-security-testing-dast Dynamic Application Security Testing] (DAST) Tools. A large number of both commercial and open source tools of this type are available and all of these tools have their own strengths and weaknesses. If you are interested in the effectiveness of DAST tools, check out the OWASP [[Benchmark]] project, which is scientifically measuring the effectiveness of all types of vulnerability detection tools, including DAST.<br />
<br />
Here we provide a list of vulnerability scanning tools currently available in the market.<br />
<br />
<br> '''Disclaimer:''' The tools listing in the table below are presented in alphabetical order. <b>OWASP does not endorse any of the Vendors or Scanning Tools by listing them in the table below. We have made every effort to provide this information as accurately as possible. If you are the vendor of a tool below and think this information is incomplete or incorrect, please send an e-mail to our [mailto:owasp_ha_vulnerability_scanner_project@lists.owasp.org mailing list] and we will make every effort to correct this information.</b><br />
<br />
OWASP is aware of the [http://sectooladdict.blogspot.com/ '''Web Application Vulnerability Scanner Evaluation Project (WAVSEP)'''. WAVSEP] is completely unrelated to OWASP and we do not endorse its results, nor any of the DAST tools it evaluates. However, the results provided by WAVSEP may be helpful to someone interested in researching or selecting free and/or commercial DAST tools for their projects. This project has far more detail on DAST tools and their features than this OWASP DAST page.<br />
<br />
== Tools Listing ==<br />
<br />
{{:Template:OWASP Tool Headings}}<br />
{{OWASP Tool Info || tool_name = [https://misterscanner.com/ Abbey Scan] || tool_owner = MisterScanner || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.acunetix.com/ Acunetix WVS] || tool_owner = Acunetix || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.ibm.com/us-en/marketplace/application-security-on-cloud Application Security on Cloud] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www-03.ibm.com/software/products/en/appscan-standard AppScan] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/Products/Application-Security/App-Scanner-Family/App-Scanner-Enterprise/ App Scanner] || tool_owner = Trustwave || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/appspider/ AppSpider] || tool_owner = Rapid7 || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://apptrana.indusface.com/basic/ AppTrana Website Security Scan] || tool_owner = AppTrana || tool_licence = Free || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.rapid7.com/products/insightvm/] || tool_ownder = Rapid7 || tool_licence = Commercial with Free Trial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.arachni-scanner.com/ Arachni] || tool_owner = Arachni|| tool_licence = Free for most use cases || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.scanmyserver.com/ AVDS] || tool_owner = Beyond Security || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.blueclosure.com BlueClosure BC Detect] || tool_owner = BlueClosure || tool_licence = Commercial, 2 weeks trial || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.breachlock.com/dynamic-application-security-testing/ BREACHLOCK Dynamic Application Security Testing] || tool_owner = BREACHLOCK || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.portswigger.net/ Burp Suite] || tool_owner = PortSwiger || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Most platforms supported }}<br />
{{OWASP Tool Info || tool_name = [https://contrastsecurity.com Contrast] || tool_owner = Contrast Security || tool_licence = Commercial / Free (Full featured for 1 App) || tool_platforms = SaaS or On-Premises }}<br />
{{OWASP Tool Info || tool_name = [https://detectify.com/ Detectify] || tool_owner = Detectify || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.digifort.se/en/scanner Digifort- Inspect] || tool_owner = Digifort|| tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.edgescan.com/ edgescan] || tool_owner = edgescan|| tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.gamasec.com/Gamascan.aspx GamaScan] || tool_owner = GamaSec || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://rgaucher.info/beta/grabber/ Grabber] || tool_owner = Romain Gaucher || tool_licence = Open Source || tool_platforms = Python 2.4, BeautifulSoup and PyXML}}<br />
{{OWASP Tool Info || tool_name = [https://gravityscan.com/ Gravityscan] || tool_owner = Defiant, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://sourceforge.net/p/grendel/code/ci/c59780bfd41bdf34cc13b27bc3ce694fd3cb7456/tree/ Grendel-Scan] || tool_owner = David Byrne || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.golismero.com GoLismero] || tool_owner = GoLismero Team || tool_licence = GPLv2.0 || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.ikare-monitoring.com/ IKare] || tool_owner = ITrust || tool_licence = Commercial || tool_platforms = N/A }}<br />
{{OWASP Tool Info || tool_name = [https://www.htbridge.com/immuniweb/ ImmuniWeb] || tool_owner = High-Tech Bridge || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.indusface.com/index.php/products/web-application-scanning Indusface Web Application Scanning] || tool_owner = Indusface || tool_licence = Commercial / Free Trial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.nstalker.com/ N-Stealth] || tool_owner = N-Stalker || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.tenable.com/products/tenable-io/web-application-scanning/ Nessus] || tool_owner = Tenable || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.mavitunasecurity.com/ Netsparker] || tool_owner = MavitunaSecurity || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/nexpose-community-edition.jsp Nexpose] || tool_owner = Rapid7 || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Windows/Linux}}<br />
{{OWASP Tool Info || tool_name = [http://www.cirt.net/nikto2 Nikto] || tool_owner = CIRT || tool_licence = Open Source|| tool_platforms = Unix/Linux}}<br />
{{OWASP Tool Info || tool_name = [https://probely.com Probely] || tool_owner = Probely || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/proxy.html Proxy.app] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.qualys.com/products/qg_suite/was/ QualysGuard] || tool_owner = Qualys || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.beyondtrust.com/Products/RetinaNetworkSecurityScanner/ Retina] || tool_owner = BeyondTrust || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.orvant.com Securus] || tool_owner = Orvant, Inc || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.whitehatsec.com/home/services/services.html Sentinel] || tool_owner = WhiteHat Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.parasoft.com/products/article.jsp?articleId=3169&redname=webtesting&referred=webtesting SOATest] || tool_owner = Parasoft || tool_licence = Commercial || tool_platforms = Windows / Linux / Solaris}}<br />
{{OWASP Tool Info || tool_name = [https://www.tinfoilsecurity.com Tinfoil Security] || tool_owner = Tinfoil Security, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS or On-Premises}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/external-vulnerability-scanning.php Trustkeeper Scanner] || tool_owner = Trustwave SpiderLabs || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://subgraph.com/vega/ Vega] || tool_owner = Subgraph || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.ubsecure.jp/en/about_ubsecure Vex] || tool_owner = UBsecure || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://wapiti.sourceforge.net/ Wapiti] || tool_owner = Informática Gesfor || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.defensecode.com/webscanner.php Web Security Scanner] || tool_owner = DefenseCode || tool_licence = Commercial || tool_platforms = On-Premises}}<br />
{{OWASP Tool Info || tool_name = [http://www.tripwire.com/it-security-software/enterprise-vulnerability-management/web-application-vulnerability-scanning/ WebApp360] || tool_owner = TripWire || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://webcookies.org WebCookies] || tool_owner = WebCookies || tool_licence = Free|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.microfocus.com/en-us/products/webinspect-dynamic-analysis-dast WebInspect] || tool_owner = Micro Focus || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/webreaver.html WebReaver] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.german-websecurity.com/en/products/webscanservice/product-details/overview/ WebScanService] || tool_owner = German Web Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [https://suite.websecurify.com/ Websecurify Suite] || tool_owner = Websecurify || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows, Linux, Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.sensepost.com/research/wikto/ Wikto] || tool_owner = Sensepost || tool_licence = Open Source || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.w3af.org/ w3af] || tool_owner = w3af.org || tool_licence = GPLv2.0 || tool_platforms = Linux and Mac}}<br />
{{OWASP Tool Info || tool_name = [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Zed Attack Proxy] || tool_owner = OWASP || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
|}<br />
<br />
== References ==<br />
<br />
*[[Source_Code_Analysis_Tools | SAST Tools]] - OWASP page with similar information on Static Application Security Testing (SAST) Tools<br />
*[[Free for Open Source Application Security Tools]] - OWASP page that lists the Commercial Dynamic Application Security Testing (DAST) tools we know of that are free for Open Source<br />
*http://sectooladdict.blogspot.com/ - Web Application Vulnerability Scanner Evaluation Project (WAVSEP)<br />
*http://projects.webappsec.org/Web-Application-Security-Scanner-Evaluation-Criteria - v1.0 (2009)<br />
*http://www.slideshare.net/lbsuto/accuracy-and-timecostsofwebappscanners - White Paper: Analyzing the Accuracy and Time Costs of WebApplication Security Scanners - By Larry Suto (2010)<br />
*http://samate.nist.gov/index.php/Web_Application_Vulnerability_Scanners.html - NIST home page which links to: NIST Special Publication 500-269: Software Assurance Tools: Web Application Security Scanner Functional Specification Version 1.0 (21 August, 2007)<br />
*http://www.softwareqatest.com/qatweb1.html#SECURITY - A list of Web Site Security Test Tools. (Has both DAST and SAST tools)<br />
<br />
[[Category:OWASP_Tools_Project]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=Category:Vulnerability_Scanning_Tools&diff=255799Category:Vulnerability Scanning Tools2019-10-29T16:27:55Z<p>Hblankenship: </p>
<hr />
<div>== Description ==<br />
<br />
Web Application Vulnerability Scanners are automated tools that scan web applications, normally from the outside, to look for security vulnerabilities such as [[Cross-site scripting]], [[SQL Injection]], [[Command Injection]], [[Path Traversal]] and insecure server configuration. This category of tools is frequently referred to as [https://www.techopedia.com/definition/30958/dynamic-application-security-testing-dast Dynamic Application Security Testing] (DAST) Tools. A large number of both commercial and open source tools of this type are available and all of these tools have their own strengths and weaknesses. If you are interested in the effectiveness of DAST tools, check out the OWASP [[Benchmark]] project, which is scientifically measuring the effectiveness of all types of vulnerability detection tools, including DAST.<br />
<br />
Here we provide a list of vulnerability scanning tools currently available in the market.<br />
<br />
<br> '''Disclaimer:''' The tools listing in the table below are presented in alphabetical order. <b>OWASP does not endorse any of the Vendors or Scanning Tools by listing them in the table below. We have made every effort to provide this information as accurately as possible. If you are the vendor of a tool below and think this information is incomplete or incorrect, please send an e-mail to our [mailto:owasp_ha_vulnerability_scanner_project@lists.owasp.org mailing list] and we will make every effort to correct this information.</b><br />
<br />
OWASP is aware of the [http://sectooladdict.blogspot.com/ '''Web Application Vulnerability Scanner Evaluation Project (WAVSEP)'''. WAVSEP] is completely unrelated to OWASP and we do not endorse its results, nor any of the DAST tools it evaluates. However, the results provided by WAVSEP may be helpful to someone interested in researching or selecting free and/or commercial DAST tools for their projects. This project has far more detail on DAST tools and their features than this OWASP DAST page.<br />
<br />
== Tools Listing ==<br />
<br />
{{:Template:OWASP Tool Headings}}<br />
{{OWASP Tool Info || tool_name = [https://misterscanner.com/ Abbey Scan] || tool_owner = MisterScanner || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.acunetix.com/ Acunetix WVS] || tool_owner = Acunetix || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.ibm.com/us-en/marketplace/application-security-on-cloud Application Security on Cloud] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www-03.ibm.com/software/products/en/appscan-standard AppScan] || tool_owner = IBM || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/Products/Application-Security/App-Scanner-Family/App-Scanner-Enterprise/ App Scanner] || tool_owner = Trustwave || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/appspider/ AppSpider] || tool_owner = Rapid7 || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://apptrana.indusface.com/basic/ AppTrana Website Security Scan] || tool_owner = AppTrana || tool_licence = Free || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.arachni-scanner.com/ Arachni] || tool_owner = Arachni|| tool_licence = Free for most use cases || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.scanmyserver.com/ AVDS] || tool_owner = Beyond Security || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.blueclosure.com BlueClosure BC Detect] || tool_owner = BlueClosure || tool_licence = Commercial, 2 weeks trial || tool_platforms = Most platforms supported}}<br />
{{OWASP Tool Info || tool_name = [https://www.breachlock.com/dynamic-application-security-testing/ BREACHLOCK Dynamic Application Security Testing] || tool_owner = BREACHLOCK || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.portswigger.net/ Burp Suite] || tool_owner = PortSwiger || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Most platforms supported }}<br />
{{OWASP Tool Info || tool_name = [https://contrastsecurity.com Contrast] || tool_owner = Contrast Security || tool_licence = Commercial / Free (Full featured for 1 App) || tool_platforms = SaaS or On-Premises }}<br />
{{OWASP Tool Info || tool_name = [https://detectify.com/ Detectify] || tool_owner = Detectify || tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [http://www.digifort.se/en/scanner Digifort- Inspect] || tool_owner = Digifort|| tool_licence = Commercial || tool_platforms = SaaS }}<br />
{{OWASP Tool Info || tool_name = [https://www.edgescan.com/ edgescan] || tool_owner = edgescan|| tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.gamasec.com/Gamascan.aspx GamaScan] || tool_owner = GamaSec || tool_licence = Commercial || tool_platforms = Windows }}<br />
{{OWASP Tool Info || tool_name = [http://rgaucher.info/beta/grabber/ Grabber] || tool_owner = Romain Gaucher || tool_licence = Open Source || tool_platforms = Python 2.4, BeautifulSoup and PyXML}}<br />
{{OWASP Tool Info || tool_name = [https://gravityscan.com/ Gravityscan] || tool_owner = Defiant, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://sourceforge.net/p/grendel/code/ci/c59780bfd41bdf34cc13b27bc3ce694fd3cb7456/tree/ Grendel-Scan] || tool_owner = David Byrne || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.golismero.com GoLismero] || tool_owner = GoLismero Team || tool_licence = GPLv2.0 || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.ikare-monitoring.com/ IKare] || tool_owner = ITrust || tool_licence = Commercial || tool_platforms = N/A }}<br />
{{OWASP Tool Info || tool_name = [https://www.htbridge.com/immuniweb/ ImmuniWeb] || tool_owner = High-Tech Bridge || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.indusface.com/index.php/products/web-application-scanning Indusface Web Application Scanning] || tool_owner = Indusface || tool_licence = Commercial / Free Trial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.nstalker.com/ N-Stealth] || tool_owner = N-Stalker || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://www.tenable.com/products/tenable-io/web-application-scanning/ Nessus] || tool_owner = Tenable || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.mavitunasecurity.com/ Netsparker] || tool_owner = MavitunaSecurity || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.rapid7.com/products/nexpose-community-edition.jsp Nexpose] || tool_owner = Rapid7 || tool_licence = Commercial / Free (Limited Capability)|| tool_platforms = Windows/Linux}}<br />
{{OWASP Tool Info || tool_name = [http://www.cirt.net/nikto2 Nikto] || tool_owner = CIRT || tool_licence = Open Source|| tool_platforms = Unix/Linux}}<br />
{{OWASP Tool Info || tool_name = [https://probely.com Probely] || tool_owner = Probely || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/proxy.html Proxy.app] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.qualys.com/products/qg_suite/was/ QualysGuard] || tool_owner = Qualys || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.beyondtrust.com/Products/RetinaNetworkSecurityScanner/ Retina] || tool_owner = BeyondTrust || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.orvant.com Securus] || tool_owner = Orvant, Inc || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.whitehatsec.com/home/services/services.html Sentinel] || tool_owner = WhiteHat Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [http://www.parasoft.com/products/article.jsp?articleId=3169&redname=webtesting&referred=webtesting SOATest] || tool_owner = Parasoft || tool_licence = Commercial || tool_platforms = Windows / Linux / Solaris}}<br />
{{OWASP Tool Info || tool_name = [https://www.tinfoilsecurity.com Tinfoil Security] || tool_owner = Tinfoil Security, Inc. || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = SaaS or On-Premises}}<br />
{{OWASP Tool Info || tool_name = [https://www.trustwave.com/external-vulnerability-scanning.php Trustkeeper Scanner] || tool_owner = Trustwave SpiderLabs || tool_licence = Commercial || tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://subgraph.com/vega/ Vega] || tool_owner = Subgraph || tool_licence = Open Source || tool_platforms = Windows, Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.ubsecure.jp/en/about_ubsecure Vex] || tool_owner = UBsecure || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://wapiti.sourceforge.net/ Wapiti] || tool_owner = Informática Gesfor || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
{{OWASP Tool Info || tool_name = [https://www.defensecode.com/webscanner.php Web Security Scanner] || tool_owner = DefenseCode || tool_licence = Commercial || tool_platforms = On-Premises}}<br />
{{OWASP Tool Info || tool_name = [http://www.tripwire.com/it-security-software/enterprise-vulnerability-management/web-application-vulnerability-scanning/ WebApp360] || tool_owner = TripWire || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [https://webcookies.org WebCookies] || tool_owner = WebCookies || tool_licence = Free|| tool_platforms = SaaS}}<br />
{{OWASP Tool Info || tool_name = [https://www.microfocus.com/en-us/products/webinspect-dynamic-analysis-dast WebInspect] || tool_owner = Micro Focus || tool_licence = Commercial || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.websecurify.com/desktop/webreaver.html WebReaver] || tool_owner = Websecurify || tool_licence = Commercial || tool_platforms = Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.german-websecurity.com/en/products/webscanservice/product-details/overview/ WebScanService] || tool_owner = German Web Security || tool_licence = Commercial || tool_platforms = N/A}}<br />
{{OWASP Tool Info || tool_name = [https://suite.websecurify.com/ Websecurify Suite] || tool_owner = Websecurify || tool_licence = Commercial / Free (Limited Capability) || tool_platforms = Windows, Linux, Macintosh}}<br />
{{OWASP Tool Info || tool_name = [http://www.sensepost.com/research/wikto/ Wikto] || tool_owner = Sensepost || tool_licence = Open Source || tool_platforms = Windows}}<br />
{{OWASP Tool Info || tool_name = [http://www.w3af.org/ w3af] || tool_owner = w3af.org || tool_licence = GPLv2.0 || tool_platforms = Linux and Mac}}<br />
{{OWASP Tool Info || tool_name = [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Zed Attack Proxy] || tool_owner = OWASP || tool_licence = Open Source || tool_platforms = Windows, Unix/Linux and Macintosh}}<br />
|}<br />
<br />
== References ==<br />
<br />
*[[Source_Code_Analysis_Tools | SAST Tools]] - OWASP page with similar information on Static Application Security Testing (SAST) Tools<br />
*[[Free for Open Source Application Security Tools]] - OWASP page that lists the Commercial Dynamic Application Security Testing (DAST) tools we know of that are free for Open Source<br />
*http://sectooladdict.blogspot.com/ - Web Application Vulnerability Scanner Evaluation Project (WAVSEP)<br />
*http://projects.webappsec.org/Web-Application-Security-Scanner-Evaluation-Criteria - v1.0 (2009)<br />
*http://www.slideshare.net/lbsuto/accuracy-and-timecostsofwebappscanners - White Paper: Analyzing the Accuracy and Time Costs of WebApplication Security Scanners - By Larry Suto (2010)<br />
*http://samate.nist.gov/index.php/Web_Application_Vulnerability_Scanners.html - NIST home page which links to: NIST Special Publication 500-269: Software Assurance Tools: Web Application Security Scanner Functional Specification Version 1.0 (21 August, 2007)<br />
*http://www.softwareqatest.com/qatweb1.html#SECURITY - A list of Web Site Security Test Tools. (Has both DAST and SAST tools)<br />
<br />
[[Category:OWASP_Tools_Project]]</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User:Sgoette&diff=255797User:Sgoette2019-10-29T15:59:03Z<p>Hblankenship: Creating user page for new user.</p>
<hr />
<div>Over 28 years experience in Architecture, Designing, Coding, Testing, Implementing solutions in HR/Payroll/Financial institutions. Have written code in a number of different languages, primarily java and C#; numerous UI technologies (jsp, javascript, jquery, asp.net and more).<br />
I love to wear multiple hats. In a real distant past, I've been a network administrator, a technology advocate, non-relational DBA, a c++ programmer and a trainer. I've brought in enterprise level systems (email, imaging into Sherw-Williams) to building a data center off a credit card for a small startup. I've been part of software design review teams; specifically, the Lotus Notes R5 Design Review team - assessing the Domino server capabilities and web based toolsets. That taught me a lot about networking, Prior to PNC, I had worked at few small software startups wearing all the hats: network admin, developer, DBA, help desk, business analyst...you name it. In the most recent past, I developed software for the Security Center of Excellence at Keybank to help inventory, track and remediate security issues with internal applications (I've always loved security)<br />
<br />
At PNC, my former life was that of a Retail Tech lead in the product engineering space. Have been involved with SOA, Testing Center of Excellence (ITKO Lisa platform), numerous integration technologies (WESB, IB, ODM, worklight) along with numberous initiative such as the Windows 7 migration and Developer's Desktop technologies groups.<br />
<br />
I love to solve problems, bringing the right people together to come up with simple solutions that are easy to understand.</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User_talk:Sgoette&diff=255798User talk:Sgoette2019-10-29T15:59:03Z<p>Hblankenship: Welcome!</p>
<hr />
<div>'''Welcome to ''OWASP''!'''<br />
We hope you will contribute much and well.<br />
You will probably want to read the [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents help pages].<br />
Again, welcome and have fun! [[User:Hblankenship|Hblankenship]] ([[User talk:Hblankenship|talk]]) 10:59, 29 October 2019 (CDT)</div>Hblankenshiphttps://wiki.owasp.org/index.php?title=User:Pgregrivera&diff=255742User:Pgregrivera2019-10-25T18:34:39Z<p>Hblankenship: Creating user page for new user.</p>
<hr />
<div>As Vice President of CAST Highlight, Greg leads product marketing & strategy for the CAST SaaS platform helping customers and partners accelerate app modernization / cloud migration, rationalize their app portfolios, and reduce open source risk. He has worked with Fortune 1000 companies such as Microsoft, IDG Communications, and Arrow Electronics for over 20 years in technology and media, helping them make successful digital transformations. Greg has a B.S. in Electrical Engineering and an M.S. in Management of Technology and is passionate about applying technology to improve business and our everyday lives.</div>Hblankenship