Talk:Marketing/Resources

Branding Guidelines

Changes to Guidelines Wording

Add the following:

"The OWASP name and logo is the property of the OWASP Foundation. The right to use the logo is granted as long as the following guidelines are followed. The right to use the OWASP brand may be revoked at any time."

Current Wording of guideline #3:

"3. The OWASP Brand may be used by OWASP Members in good standing to promote a person or company's involvement in OWASP."

We propose changing the wording of guideline #3 to:

"3. The OWASP Brand may be used by OWASP Members in good standing to acknowledge a person or company's support of The OWASP Foundation."

We updated item 4 as follows, adding information for external events to the original wording:

"4. The OWASP Brand may be used to indicate that OWASP is a host or sponsor of an event for internally produced events or for sponsored and partnered events with a signed agreement."

We added the word "endorses" under item 6. so that it now reads:

"6. The OWASP Brand must not be used in a manner that suggests that The OWASP Foundation supports, advocates, endorses, or recommends any particular product or technology."

Need to review purpose of #9.

Remove "based on personal desire."

Add right to request removal on noncompliant images.

Remove references to OWASP Published Standard.

Non-Endorsement Statement

We also added a Non-Endorsement statement as follows:

Statement of Non-Endorsement

OWASP does not endorse any product, services or tools. The following disclaimer/About OWASP text can be used in projects or press releases that reference external products, services or tools:

About the OWASP Foundation: The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. You'll find everything about OWASP linked from our wiki and current information on our OWASP Blog. OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide. We ask that the community look out for inappropriate uses of the OWASP brand including use of our name, logos, project names and other trademark issues.


Suggested rewrite of this statement:

Statement of Non-Endorsement

OWASP does not endorse any product, services or tools. The following disclaimer/About OWASP text can be used in projects or press releases that reference external products, services or tools. We ask that the community look out for inappropriate uses of the OWASP brand including use of our name, logos, project names and other trademark issues.

About the OWASP Foundation: The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. You'll find everything about OWASP linked from our wiki and current information on our OWASP Blog. OWASP does not endorse or recommend any product or service This allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide.

---

I (Dirk) would suggest to complete rewrite this:

The OWASP logo (future: is a trademark and) is the property of the OWASP Foundation.

• OWASP logos must not be used by individuals or organizations to promote commercial products, services, or events such as conferences, courses.
• OWASP logos must not be used in a manner that suggests that The OWASP Foundation supports, advocates, endorses, or recommends any particular product, services or technology.
• OWASP logos must not be used in a manner that suggests that a product or technology is compliant with any OWASP Materials
• OWASP logos must not be used in a manner that suggests that a product or technology can enable compliance with any OWASP Materials
• OWASP logos may be used by special arrangement with The OWASP Foundation. Requests to use OWASP logos should be directed in writing to <fillinmailaddresshere>. Requests will be evaluated on a case-by-case basis by a compliance team.
• The special arrangement can be withdrawn by OWASP at any point of time.

Legally this needs to be accompanied by a TM but it would be great if at least one step would be tackled in the next days.

See the whole discussion threads on abuse on the leaders list from April 2016 on. We really need to make sure that vendors and others doesn't use the good name of OWASP for their own marketing.

---

• • • Without commenting on the substance of the proposed edits, we need to include the following -Tiffany Long***

"name" should accompany logo as we should also TM our name.