This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

OWASP Media Project

Jump to: navigation, search
OWASP Project Header.jpg

OWASP Media Project

OWASP Media Project is an operational project that gather, consolidate and promote OWASP content in video format on a central appealing hub. The first instance of the project is a YouTube channel for publishing major conference recordings and links to other channels. The second and target main instance of the project will be a platform/channel agnostic video portal.

OWASP Video Portal

We're currently developing a portal tied with the new OWASP website that will serve video content to the OWASP audience. It will be an index only as the source content will stay on their respective platform. Current technical target is to be hosted on GitHub Pages. If you want to contribute or want your content to be included, come find us on GitHub (link to be added soon)!

Are you a chapter or project and want access on YouTube?

We suggest that leaders create their own channel and request to be linked to. Send us an email into our project Google Groups to be added. The main reason is that YouTube unfortunately doesn't scale well for access management and having your own channel will give you the control and responsiveness of action you need.


OWASP Media Project is distributing content that is free to use. It is licensed under the Creative Commons Attribution 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

AppSecUSA 2018 playlist

AppSecEU 2018 playlist

AppSecUSA 2017 playlist

AppSecEU 2017 playlist

AppSecUSA 2016 playlist

AppSecEU 2016 playlist

AppSecUSA 2015 playlist

AppSecEU 2015 playlist

Live from AppSecUSA 2014 playlist

Live from AppSecEU 2014 playlist

Quick Access

YouTube Official OWASP Channel

What is OWASP Media Project?

OWASP Media Project provides:

Project Leader

  • Jonathan Marcil

See Project About for contributors.

Contact Us

Google Groups [email protected]

Slack #owasp-media

GitHub OWASP/video-portal

News and Events

  • [Jun 07 2019] Wiki page updated with new rules and introduction of the Video Portal.
  • [Jun 06 2019] Reached 1,000,000 views on YouTube!
  • [Jun 05 2019] Working session at Open Security Summit 2019.
  • [Mar 24 2017] Reached 500,000 views on YouTube!
  • [Jul 26 2015] Reached 200,000 views on YouTube!
  • [Nov 21 2014] Reached 100,000 views on YouTube!
  • [Apr 07 2014] Wiki page updated to new template.
  • [Sep 14 2013] Creation of the project


Team San Francisco #downtown Owaspmediaprojectteamdowntown.jpg

Team Denver #appsecstreaming Appsecstreaming-denver.jpg

Academic Partner Münster University of Applied Sciences IT Security Lab

Logo international vollton itseclab.png

Related Projects

On this page:

Rules for the OWASP Video Portal

  • Video content must be related to OWASP
    • Projects
    • Chapter meetings
    • OWASP branded conferences
  • Any language is accepted and should be indicated
  • References to content should be the correct level to respect rules
    • Full channels
    • Playlists
    • Individual videos

Rules for the OWASPGLOBAL YouTube Channel

  • Uploads must be at minimum quality level equivalent to latest uploaded videos
  • Content limited to AppSec Global Conferences or equivalent English content
    • AppSecCali as a good example: 2 days conferences, English, professional recording
  • Alternative content allowed: Videos spotlights
    • Small or mediums videos that present either another channel or a project
    • Used to link from the OWASPGLOBAL channel to another other channel
  • For permanent managers
    • Need to have a clear assignment (eg. working for a specific conference)
    • Need to be registered on the mailing list
    • Must acknowledge and follow minimum security best practices
      • Use a dedicated browser session
      • Logout of OWASP account when not needed
  • For owners
    • Need to sign the OWASP Social Media Agreement/Contract
  • Temporary managers are allowed
    • They must be in contact directly with a permanent manager or owner
    • Typically they are contractor firms doing the recordings at conferences

Global Conference Guidelines

OWASP Media Project used to provide on site recording for talks during major OWASP conferences (20+ speakers), but this is now a thing of the past. In order to achieve a respectable results in quality of content, dealing with an experienced professional vendor is now a must.

Note that OWASP Media Project will still provide support on uploading, publishing and marketing of the video content as of 2018. Vendor could still be required to upload to YouTube, this is particularly useful if they don't deliver on physical media by the end of the event.

In order to assure painless success some hard requirements are to be followed:

  • Use HDMI for screen capture
  • Do not record the slides using a video camera and use that as final publishing
  • Require the vendor to have experience with recording presentations

And some somewhat flexible requirements (downplaying them will jeopardize quality):

  • Require the vendor to have experience with online publications
    • Have the vendor send a prior sample of their work
  • Coordinate the recording vendor with the audio vendor
    • Some hotels will enforce their own audio vendor, fight them or make sure that they have a SLA in the contract
    • Most of the problems you'll have at this point will be audio, be prepared, but don't go as silly as have dual microphones, unless it's a huge keynote.
  • Have the vendor do live post-production. That means that talks are ready at the end of the conference, not 2-4 weeks after
  • If they do post-production with music, make sure it has been tested on YouTube to not generate copyright strikes.
  • If recording of the speaker is done, make sure it's with professional grade camera
  • Prioritize keynotes on budget for recording and additional marketing efforts

What to NOT do:

  • Do not use your own laptop for presentations with software recording
    • We actually suggest software recording for smaller or single talk event, but in a big conference that's a guaranteed headache
  • Do not publish all content at once
  • Do not expect 100% quality from any vendor
    • A 5% failure rate is to be expected; you'll loose some recordings, sound will be bad on some, aspect ratio might be weird, HDCP might ruin everything.
    • Some talks will be beyond salvage. We published them in the past but with 700+ videos online now, we think it's unnecessary unless there's a direct demand from the community to see the talk anyways.
  • Do not wait to publish talks more than ~3 months after the event.
    • With global events overlapping, you also don't want to publish one event over the other.
    • Statistics has shown that after 2 months traffic greatly drop.

Last but not least, be ready to pay the price. We suggest that you look for sponsors in order to cover the costs. Be aware that you might break YouTube EULA by adding ads inside the videos, especially when using permanent logos. You can however add a comment bellow in text, or do sponsored content in a stand alone video or inside the content.

If you are lucky, you might find a local enthusiast that will do it for free. In this case, we suggest to have professional recording of the keynotes, and make sure you handle the risk you are taking by having exceptional communication between them and the conference team.

YouTube Upload Guidelines

In order to achieve an acceptable level of quality and consistency trough the videos upload on the channel, each uploaded videos must meet theses requirements :

  • Comply with YouTube Copyright regulations
    • Fun introduction
    • Basically, do not upload any content or partial content that are from another source, that includes music, TV show captures, clips from movies/TV.
    • If we get Copyright strikes, after 3 we are out and will be ban from YouTube.
    • Deleting an infringement strike videos won't help removing the strike.
  • Respect basic quality standards for uploaded videos.
    • 720p minimum, upload in 1080p Full HD if available (YouTube will create lesser resolutions versions automatically)
    • Slides must be readable in 480p (for mobile usage and default web view).
    • Sound must be clear and with no electronic noise or with minimal white noise.
      • Mono can be used, if stereo make sure both channels are being used
    • Editing must be professional level or very minimal with YouTube tools or absent.
  • For meta data information:
    • Put the subject and the speaker name in the title
      • If the subject is too long, the speaker name can be omitted
    • Put the abstract if available and speaker BIO in the description
    • Leave the OWASP Media Project signature
    • Use the default tags (currently #owasp and #appsec) and optionally add some if desired
  • If videos are from a logical batch, associate it with a playlist (Example: AppSecEU2013 playlist)

YouTube Access Management

Access management is currently given to OWASP Media Project leaders and OWASP Global Staff. As owner, make sure you:

  • Send an email to the project mailing list when adding or removing access
  • Move back to communication manager any manager that are not posting video content actively
  • Periodically audit and clean up the accesses given to people
  • You can access the manage permissions page while logged in with the correct Google account on Brand Account details

YouTube Uploading Procedure


  • Have a Google account, preferably an one, that is added as a manager of OWASPGLOBAL YouTube channel
  • If you plan to upload content more than one conference a year, you must be subscribed to our OWASP Media Project mailing list
  • Read the "Guidelines and standards for YouTube" especially about copyright


  • Use another browser or profile than your normal browser in order to upload to YouTube. If you browse YouTube as "OWASP", all history, likes and favorites will be shared with the channel.
  • Take special security care of your account because it is now having all access to a front-facing OWASP asset


  • Login as OWASP on YouTube with the top right account change widget
  • As OWASP, Create a playlist with the name of your contribution
  • Upload the video using
    • In Privacy settings, make it "Unlisted" or "Private" if you don't want it to be shown right away
    • As it upload and process, set the correct title and description (please leave the Media Project signature)
    • Add tags related to the subject or the contribution. These are like keywords.
    • You can use the Video Manager in order to tag many videos at once
    • Save and wait until it is completely uploaded
  • When ready to publish, view the video and add it to your playlist
    • Change the Privacy settings to Public if it was Private or Unlisted
    • Review title and description
  • Share the video as you wish on Twitter, LinkedIn, Facebook, etc.
    • Use embed code to share it in HTML
    • Use wiki code #ev:youtube|VIDEO-ID or #ev:youtubeplaylist|PLAYLIST-ID between {{}} for wiki

Next goal

Create the OWASP Video Portal.


  1. ✓ Create and setup an official YouTube channel: OWASPGLOBAL
  2. Create the OWASP Video Portal
    1. Find a good subdomain name such as
    2. Release the video portal on the subdomain
  3. Engage the future marketing committee to invest in promoting video content
  4. Find contributors for video spotlights on YouTube OWASPGLOBAL (links to other channels)

Getting Involved

Reach us on Slack or on the Google Group!topic/media-project to be involved!

Soon we'll also be on GitHub and you can contribute there with PRs and Issues.

What does this OWASP project offer you?
What releases are available for this project?
what is this project?
Name: OWASP Media Project
Purpose: The OWASP Media Project is an operational project that gather, consolidate and promote OWASP content in video format on a central appealing hub.

The first instance of the project was a YouTube channel.

The second and current target main instance will be a platform/channel agnostic video portal.

License: Creative Commons Attribution 3.0 License
who is working on this project?
Project Leader(s):
Project Contributor(s):
  • Harold Blankenship (OWASP Foundation Staff)
  • Tom Wirschell (Europe)
  • Past contributors: Amelia Graycen (leader), Yvan Boily, Nirmal Lama Titung, Ahmed Neil, Kristian Erik Hermansen, Neil Matatall, Christian Dresen, Julian Held, Rene Boeing, Maik Dankel, Tom Joy, Niko, Zach Lummis, Kyle Archer, Katherine Carpenter, Neal Mueller, Ian Gorrie.
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: Mailing List Archives
Project Roadmap: View
Key Contacts
current release

last reviewed release
Not Yet Reviewed

other releases