Skip to content
ImpactrStart an engagement

Frameworks & standards

OWASP

Open Worldwide Application Security Project

The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation that produces freely available application-security resources, including the OWASP Top 10, the API Security Top 10, the ASVS, and many tools. Its lists are widely used as baselines for what application and API security testing should cover.

Key points

  • Community-driven, vendor-neutral AppSec resources.
  • Publishes the Top 10, API Top 10, ASVS, and more.
  • Widely referenced as coverage baselines.

Related

References

Impactr finds and proves whether flaws like this are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.

Start an engagement
← All terms