View source for OWASP Cloud-Native Application Security Top 10

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

== Introduction==
Cloud native technologies empower organizations to build and run scalable applications in modern, dynamic environments such as public, private, and hybrid clouds. Containers, cloud functions (serverless), service meshes, micro-services, immutable infrastructure, and declarative APIs exemplify this approach. Cloud-Native Applications is a fundamentally new and exciting approach to designing and building software. However, it also raises a completely new set of security challenges. For example, when you move to a microservice model, end-to-end visibility, monitoring and detection become more complex and difficult to execute. 

== Purpose ==
The primary goal of this document is to provide assistance and education for organizations looking to adopt Cloud-Native Applications. The guide provides information about what are the most prominent security risks for Cloud-Native applications, the challenges involved, and how to overcome them.

==Licensing==

This program is free software: you can redistribute it and/or modify it under the terms of the [http://www.gnu.org/licenses/agpl-3.0.html link GNU Affero General Public License 3.0] as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.  OWASP Cloud-Native Application Security Top 10 and any contributions are Copyright &copy; by OWASP 2018.  

== Project Sponsors ==
[[File:PureSec-Logo.png|left|frameless|puresec]]



==Getting Involved==
You do not have to be a security expert or a programmer to contribute. Contact the Project Leader(s) to get involved, we welcome any type of suggestions and comments.
Possible ways to get contribute:
* We are actively looking for organizations and individuals that will provide vulnerability prevalence data.
* Translation efforts (later stages)
* Individuals and organizations that will contribute to the project will listed on the acknowledgments page.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Project Resources ==
TBD

== Project Leader ==
[[User:Orysegal|Ory Segal]]

== Related Projects ==

* [[:Category:OWASP Top Ten Project]]

==Classifications==

   {| width="200" cellpadding="2"
   |-
   | colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Document]]
   |-
   | rowspan="2" align="center" valign="top" width="50%" | [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
   | align="center" valign="top" width="50%" | [[File:Owasp-builders-small.png|link=Builders]]  
   |-
   | align="center" valign="top" width="50%" | [[File:Owasp-defenders-small.png|link=Defenders]]
   |-
   | colspan="2" align="center" | [[Image:Creative%20Commons.png| 90px | link=https://creativecommons.org/licenses/by-sa/3.0/| Creative Commons Attribution ShareAlike 3.0 License]]
   |}
|}
 
__NOTOC__ <headertabs /> 

[[Category:OWASP Project]] 
[[Category:OWASP_Document]]