This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
OWASP Security Integration System

Table of content
What does SCAT not do
What does SCAT do
Process integrity tool vs point in time security verification tool
See below how the Secure code assurance tool integrates security into software development phases
Objective: Ensures security requirements are understood
Objective: Ensure correct implementation of security requirements
Objective: Ensure correct implementation of security requirements
Objective: Ensure valid security testing
Objective: Streamline the approval and audit process
Objective: Enable risk managers to prioritise, plan and monitor mitigation efforts
Preparation phase<h1>
When developing secure software we need to consider both standard secure code and client specific architectural requirements
Standard secure code requirements
Client specific architectural requirements
Promoting compliance to security requirementsMinimising the impact of audit and assuranceInforming risk based decision makingIntegrating security into the software development process | ![]() | ![]() | ![]() | ![]() |