Main Page

Welcome to OWASP

The Open Web Application Security Project

OWASP is... Our mission is to find and fight the causes of insecure software. Our mission is to find and fight the causes of insecure software. Our mission is to find and fight the causes of insecure software. Our mission is to find and fight the causes of insecure software. Our mission is to find and fight the causes of insecure software. Our mission is to find and fight the causes of insecure software. Our mission is to find and fight the causes of insecure software. Our mission is to find and fight the causes of insecure software.

5,856 articles

Participation

Join us...Support OWASP by becoming a member

What You'll Find Here

Whether you're just Getting Started in Application Security or you're an expert, there's information here for you. Find out about Application Vulnerability Areas, Threat Modeling, Secure Development Lifecycle, Countermeasures, and platforms like Java, .NET, PHP, and more.

There are also lots of materials available for download. There are Tools, Technical Papers, Presentations, Templates, Checklists, and more. All OWASP materials are free and licensed under an approved open source license. Some of our most popular downloads include:

The Guide to Building Secure Web Applications and Web Services book
The WebScarab web application and web service penetration testing tool
The WebGoat web application security training environment
The Top Ten Most Critical Web Application Security Vulnerabilities awareness paper
more...

OWASP Projects

OWASP has a variety of Projects underway to advance the state of the art in different areas of application security. Anyone can join our projects and help out. All you have to do is choose a project and request a task. A few of the projects that need help right now: