Revision as of 19:35, 13 January 2009

The OWASP Foundation is a not-for-profit 501c3 charitable organization not associated with any commercial product or service. OWASP is an open source project dedicated to finding and fighting the causes of insecure software to be successful, we need your support. OWASP individuals, supporting educational and commerical organization form an application security community that works together to create articles, methodologies, documentation, tools, and technologies (“OWASP Materials”).

Code of Ethics

• Perform all professional activities and duties in accordance with all applicable laws and the highest ethical principles;
• Promote the implementation of and promote compliance with standards, procedures, controls for application security;
• Maintain appropriate confidentiality of proprietary or otherwise sensitive information encountered in the course of professional activities;
• Discharge professional responsibilities with diligence and honesty;
• Refrain from any activities which might constitute a conflict of interest or otherwise damage the reputation of employers, the information security profession, or the Association; and
• Not intentionally injure or impugn the professional reputation of practice of colleagues, clients, or employers.

Principles

• Free & Open
• Governed by rough consensus & running code
• Abide by a code of ethics (see ethics)
• Not-for-profit
• Not driven by commercial interests
• Risk based approach

Categories of Membership & Supporters

Membership Category	Description	Annual Membership Fee
Individual Members	Application Security professionals that agree with the OWASP code of ethics and principals and wishes to be recognized as a member of the OWASP Foundation.	$50/USD 12 month term
Organization Supporters	Organizations that wish to support OWASP with a 100% tax deductible donation to enable OWASP Foundation to continue the mission. Support Projects & Grants and get discounts at OWASP Conferences to exhibit product/services. Optional - Host a local OWASP meeting to raise security awareness at your offices	$5000/USD 12 month term OR with your purchase order, quarterly payments also accepted.
Accredited University Supporters	Required to provide meeting space 2x per year and include OWASP in the education curriculum to students. Benefits Have OWASP speakers made available to them for classes and other events OWASP will frequently provide information regarding OWASP projects, tools and documentation which may be relevant to the University OWASP can work with the University to identify OWASP materials which may aid research initiatives at the University OWASP and the University can jointly publicize season of code events which provide funding for students or faculty to perform security based research OWASP and the University can work together to host security seminars or provide introductory training sessions for students on OWASP tools, documentation and security skills. University can assist local OWASP chapter by providing educational meeting space for local chapter meetings Note: This is intended for the University as a whole to become involved with OWASP. This does not imply individual or organizational membership for the University, students or faculty. However, all students and faculty are encouraged to explore the benefits of becoming an individual member.	No Charge - Contact Your Local Chapter Leader to get involved.

Note: OWASP individual membership fees, OWASP conferences tickets, OWASP conference sponsorships, and OWASP banner ads are not considered 100% tax deductible donations due to the benefits the paying organization receives see United States IRS Guideline 557 Organization supporters & direct donations to OWASP however are fully tax deductible given OWASP's recognized U.S. non-profit status. Do you support OWASP, show the world.

Current OWASP Organization Supporters & Individual Members

Click here for a brief description of our Corporate Members
Click here for more information on our Membership packages or

Supporters
Click here for more information on our Membership packages or

OWASP Membership Frequently Asked Questions (FAQ)

Why Should I Become An OWASP Member or Organization Supporter

OWASP provides documentation, tools, methodologies, standards, articles, and message forums (“OWASP Materials”) as a service to Internet users worldwide to help users and developers understand more about application security. OWASP makes these materials available to end users to help them acquire, build, test, and operate secure software. In addition to the benefits you receive as described above, your membership helps to support the growth of OWASP and the development of new and improved OWASP Materials. Because we are an open, non-commercial entity, we can take on projects that commercial entities driven by profit motives could not. Everyone benefits from these projects. Your support will help OWASP continue to find and fight the causes of insecure software.

How Are Funds Used?

OWASP is a 501c3 not-for-profit foundation, and all funds go directly to support OWASP projects, grants, chapters, and infrastructure. Our funds come from conferences, memberships, advertising, and individual and organization supporter contributions.

Who Must Become an OWASP Member?

Memberships are not required to use OWASP materials under each project's open source license. Also, anyone can participate in or contribute to an OWASP project without becoming a member. Membership provides a commercial license to all OWASP Materials for your entire organization. This license will ensure that you can modify, use, and bundle OWASP Materials in applications and documents under a single commercial license. Your membership fees are what make the various OWASP projects possible.

How Can I Become An OWASP Member?

To become an OWASP Member, an individual or organization must: Agree to the terms and conditions of the OWASP Membership Agreement. Pay the appropriate membership fee, depending on what type of OWASP Membership is indicated. (See top of page for both) Keep OWASP updated with accurate contact and business profile information. Enrollment as an OWASP Member is required before a commercial license to use the materials is established. The term of the agreement is one year from the date of execution. We appreciate your interest in becoming an OWASP Member. Click the "Register Now" logo to begin the OWASP Member registration process:

What is OWASP’s licensing model?

• Open Source Licenses: Each OWASP project is licensed under one of the approved open source licenses, such as the GPL, LGPL, GFDL, and BSD. Under these licenses, you may be required to contribute changes back to the open source community at large, according to the terms of the applicable open source license.

For more information

Contact: Kate Hartman

OWASP Foundation 9175 Guilford Road Suite #300 Columbia, MD 21046 301-575-0189 (phone) 301-604-8033 (fax)