Main Page
From OWASP
The Open Web Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of application software. Our mission is to make application security "visible," so that people and organizations can make informed decisions about application security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. The OWASP Foundation is a 501c3 not-for-profit charitable organization that ensures the ongoing availability and support for our work.
You'll find everything about OWASP here on our wiki. Please feel free to make changes and improve our site. There are hundreds of people around the globe who review the changes to the site to help ensure quality. If you're new, you may want to check out our getting started page. Questions or comments should be sent to one of our many mailing lists. Or you can contact us directly at owasp@owasp.org. If you like what you see here and want to support our efforts, please consider becoming a member.
This news feed is moderated by OWASP and will feature high-quality posts focused on application security that advance the field, provide useful insight, or are useful educational resources.
Find your chapter
OWASP Regional Conferences
11/03-11/07 OWASP Summit Portugal 08
Archived Events
(slides and videos from the event)
Special Announcement
- The OWASP Top 10 has been translated into French and Portuguese.
- Click Here for the French Translation!
- Click Here for the Portuguese Translation!
- Four new OWASP tools are available. The Enterprise Security API is a clean intuitive security API for enterprise developers, OWASP CSRFTester tests for CSRF flaws, OWASP CSRFGuard stops CSRF attacks, and the fantastic new Antisamy component allows safe posting of rich content.
OWASP Summer of Code 2008 - 31 Applications have been selected!
- OWASP Newsletters
- OWASP newsletters periodically report on OWASP events, projects, people, tools, updates to the wiki, and more application security news. Read...
Job Board
- The OWASP Job Board is a place to list application security employment opportunities as well as requests for proposals for application security work to be performed.
- Are you a college student looking for a summer internship in the application security industry? If so, then OWASP is the place for you! We are currently looking to fill two internship positions for this summer. These are paid internships. Click here for more info!
OWASP Moderated AppSec News Feed
- Drawn from over 130 blogs and news sources, this feed features only high-quality application security posts that are educational, innovative, and useful. Subscribe to the OWASP Feed
OWASP Application Security Search Engine
- OWASP's custom search engine allows you to search all of OWASP and dozens of other application security websites. You can filter your results to see only non-commercial sites, products, services, and more... Try it!
OWASP Application Security Research Grants
- OWASP funds promising application security researchers with project grants for tools, guides, surveys, and much more. 100% of your Membership dues go towards funding these projects. Please check the OWASP Grants page to learn how to submit a grant proposal.
If you use OWASP materials, please consider helping us continue our work.



















































