owasp - Robuta Search

https://owasp.org/ OWASP Foundation, the Open Source Foundation for Application Security | OWASP Foundation OWASP Foundation, the Open Source Foundation for Application Security on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works... owasp foundation the open source application security https://owasp.org/www-project-top-ten/ OWASP Top Ten Web Application Security Risks | OWASP Foundation The OWASP Top 10 is the reference standard for the most critical web application security risks. Adopting the OWASP Top 10 is perhaps the most effective first... owasp top ten web application security risks foundation https://owasp.org/www-community/attacks/csrf Cross Site Request Forgery (CSRF) | OWASP Foundation Cross Site Request Forgery (CSRF) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. cross site request forgery csrf owasp foundation https://owasp.org/www-community/attacks/xss/ Cross Site Scripting (XSS) | OWASP Foundation Cross Site Scripting (XSS) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. cross site scripting xss owasp foundation https://owasp.org/www-project-web-security-testing-guide/ OWASP Web Security Testing Guide | OWASP Foundation The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals. web security testing owasp guide foundation https://owasp.org/www-project-top-10-for-large-language-model-applications/ OWASP Top 10 for Large Language Model Applications | OWASP Foundation Aims to educate developers, designers, architects, managers, and organizations about the potential security risks when deploying and managing Large Language... large language model owasp top applications foundation https://owasp.org/www-community/attacks/SQL_Injection SQL Injection | OWASP Foundation SQL Injection on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. sql injection owasp foundation https://genai.owasp.org/llm-top-10/ LLMRisks Archive - OWASP Gen AI Security Project gen ai archive owasp security project https://genai.owasp.org/ Home - OWASP Gen AI Security Project May 21, 2026 - Identifying and tackling the risks of Gen AI systems and applications OWASP GenAI Security Project A global community-driven and expert led initiative to... gen ai owasp security project https://mas.owasp.org/ OWASP Mobile Application Security - OWASP Mobile Application Security mobile application owasp security https://owasp.org/www-project-juice-shop/ OWASP Juice Shop | OWASP Foundation Probably the most modern and sophisticated insecure web application for security trainings, awareness demos and CTFs. Also great voluntary guinea pig for your... owasp juice shop foundation https://owasp.org/www-project-enterprise-security-api/ OWASP Enterprise Security API (ESAPI) | OWASP Foundation OWASP Enterprise Security API (ESAPI) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of... enterprise security owasp api foundation https://cheatsheetseries.owasp.org/ Introduction - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. cheat sheet introduction owasp series https://owasp.org/slack/invite Slack Invite | OWASP Foundation Slack Invite on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. slack invite owasp foundation https://owasp.org/www-project-application-security-verification-standard/ OWASP Application Security Verification Standard (ASVS) | OWASP Foundation The OWASP Application Security Verification Standard (ASVS) Project is a framework of security requirements that focus on defining the security controls... application security owasp verification standard foundation https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html SQL Injection Prevention - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. sql injection prevention cheat sheet owasp series https://genaisecurity.beehiiv.com/ Home | OWASP Gen AI Security Project - Top 10 LLM Apps & Gen AI, Newsletter gen ai security project owasp https://owasp.org/www-project-secure-headers/ OWASP Secure Headers Project | OWASP Foundation Provides technical information about HTTP security headers. owasp secure headers project foundation https://owasp.org/API-Security/editions/2023/en/0xa1-broken-object-level-authorization/ API1:2023 Broken Object Level Authorization - OWASP API Security Top 10 The Ten Most Critical API Security Risks api security broken object level https://owasp.org/www-chapter-london/ OWASP London | OWASP Foundation OWASP London on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp london foundation https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html Authentication - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. cheat sheet authentication owasp series https://owasp.org/www-community/Source_Code_Analysis_Tools Source Code Analysis Tools | OWASP Foundation Source Code Analysis Tools on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. source code analysis tools owasp foundation https://marketplace.visualstudio.com/items?itemName=dependency-check.dependencycheck OWASP Dependency Check - Visual Studio Marketplace Extension for Azure DevOps - Dependency Check is a Software Composition Analysis (SCA) tool that attempts to detect publicly disclosed vulnerabilities... visual studio owasp dependency check marketplace https://dependencytrack.org/ Dependency-Track | Software Bill of Materials (SBOM) Analysis | OWASP Dependency-Track is the open source platform that over 20,000 organizations use to inventory components, find vulnerabilities, and enforce policy across the... software bill of materials dependency track sbom analysis https://owasp.org/API-Security/editions/2023/en/0xa3-broken-object-property-level-authorization/ API3:2023 Broken Object Property Level Authorization - OWASP API Security Top 10 The Ten Most Critical API Security Risks object property https://india.appsecdays.org/ Global AppSec Days India 2026 | OWASP Foundation Global AppSec Days India 2026 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. global appsec days india owasp https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html Content Security Policy - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. content security policy cheat sheet owasp series https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html Password Storage - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. password storage cheat sheet owasp series https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_Using_Security_Questions_Cheat_Sheet.html Choosing and Using Security Questions - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. choosing and using security questions cheat sheet owasp series https://owasp.org/API-Security/editions/2023/en/0x11-t10/ OWASP Top 10 API Security Risks – 2023 - OWASP API Security Top 10 The Ten Most Critical API Security Risks api security risks owasp top https://owasp.org/www-chapter-japan/ OWASP Japan | OWASP Foundation OWASP Japan on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp japan foundation https://owasp.org/www-project-webgoat/ OWASP WebGoat | OWASP Foundation OWASP WebGoat on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://owasp.org/www-chapter-copenhagen/ OWASP Copenhagen | OWASP Foundation OWASP Copenhagen on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp copenhagen foundation https://owasp.org/blog/2026/05/05/owasp-unveils-strategic-plan-world-without-insecure-software OWASP Foundation Unveils Its Strategic Plan for a World Without Insecure Software | OWASP Foundation OWASP Foundation Unveils Its Strategic Plan for a World Without Insecure Software on the main website for The OWASP Foundation. OWASP is a nonprofit foundation... owasp foundation strategic plan https://genai.owasp.org/resource/owasp-top-10-for-llm-applications-2025/ OWASP Top 10 for LLM Applications 2025 Apr 28, 2025 - Discover the OWASP Top 10 for LLM Applications (2025) – essential guidance for securing large language model applications against emerging vulnerabilities. for llm owasp top applications https://cheatsheetseries.owasp.org/cheatsheets/Ruby_on_Rails_Cheat_Sheet.html Ruby on Rails - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. ruby on rails cheat sheet owasp series https://wiki.owasp.org/index.php/LatamTour2019 LatamTour2019 - OWASP owasp https://id.strikingly.com/blog/posts/panduan-utama-untuk-kerentanan-keamanan-website-owasp-sepuluh-teratas Panduan Utama untuk Kerentanan Keamanan Website OWASP S... Keamanan website adalah hal yang sangat penting di lanskap digital saat ini. Dengan meningkatnya jumlah ancaman dan serangan siber, bisnis harus memahami dan... panduan utama keamanan website untuk owasp https://owasp.org/API-Security/editions/2023/en/0xa5-broken-function-level-authorization/ API5:2023 Broken Function Level Authorization - OWASP API Security Top 10 The Ten Most Critical API Security Risks api security broken function level https://mas.owasp.org/MASTG/best-practices/MASTG-BEST-0040/ MASTG-BEST-0040: Preventing Overlay Attacks - OWASP Mobile Application Security mobile application best preventing overlay attacks https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/11-Testing_for_Code_Injection WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://wiki.owasp.org/index.php/Category:Attack Category:Attack - OWASP category attack owasp https://ot.owasp.org/v/2025/the-top-10/components-with-insufficient-security-capabilities/ 9. Insufficient Security Capabilities - OWASP Operational Technology (OT) Top 10 insufficient security operational technology capabilities owasp ot https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/README WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://owasp.org/API-Security/editions/2019/el-gr/0xa3-excessive-data-exposure/ API3:2019 Excessive Data Exposure - OWASP API Security Top 10 The Ten Most Critical API Security Risks data exposure api security excessive owasp top https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/03-Test_File_Extensions_Handling_for_Sensitive_Information WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/10-Business_Logic_Testing/08-Test_Upload_of_Unexpected_File_Types WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/03-Testing_for_Sensitive_Information_Sent_via_Unencrypted_Channels WSTG - Latest | OWASP Foundation WSTG - Latest on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. latest owasp foundation https://wiki.owasp.org/index.php/File_System File System - OWASP file system owasp https://owasp.org/API-Security/editions/2019/en/0xa7-security-misconfiguration/ API7:2019 Security Misconfiguration - OWASP API Security Top 10 The Ten Most Critical API Security Risks security misconfiguration owasp api top https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/06-Session_Management_Testing/06-Testing_for_Logout_Functionality WSTG - Stable | OWASP Foundation WSTG - Stable on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. stable owasp foundation https://policy.owasp.org/operational/mailing-list.html Rules of Procedure | Mailing Lists | OWASP Foundation Mailing Lists on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. rules of procedure mailing lists owasp foundation https://secureflag.owasp.org/s?a5e4a43a-7464-4196-91ee-9b7caca1d1c3 SecureFlag Certificate - NodeJS OWASP Top 10:2021 in certificate nodejs owasp top https://www.codecademy.com/learn/2021-owasp-top-10-server-side-request-forgery OWASP Top 10: Server Side Request Forgery | Codecademy You will learn about Server-Side Request Forgery, what it is and how to prevent it. server side request forgery owasp top codecademy https://owasp.org/www-community/vulnerabilities/Vulnerability_template Vulnerability template | OWASP Foundation Vulnerability template on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. vulnerability template owasp foundation https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/04-Authentication_Testing/06-Testing_for_Browser_Cache_Weaknesses WSTG - v4.2 | OWASP Foundation WSTG - v4.2 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/07-Input_Validation_Testing/13-Testing_for_Format_String_Injection WSTG - Stable | OWASP Foundation WSTG - Stable on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. stable owasp foundation https://wiki.owasp.org/index.php/Category:Activity Category:Activity - OWASP category activity owasp https://depscan.readthedocs.io/Develop/core-concepts/ Core Concepts and Modules | OWASP dep-scan core concepts modules owasp dep scan https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/04-Authentication_Testing/02-Testing_for_Default_Credentials WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://owasp.org/www-project-ot-top10-vulnerabilities-demonstrator/ OWASP OT Top10 Vulnerabilities Demonstrator Project | OWASP Foundation A very brief, one-line description of your project owasp ot vulnerabilities demonstrator project https://board.owasp.org/meetings-historical/2026/202601-02.html January 2026 Board Summit | OWASP Foundation January 2026 Board Summit on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. board summit january owasp foundation https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet.html Insecure Direct Object Reference Prevention - OWASP Cheat Sheet Series Website with the collection of all the cheat sheets of the project. object reference cheat sheet insecure direct prevention https://owasp.org/www-chapter-france/event/2021/2021-06-22.html Meetup OWASP Paris (22/06/2021) | OWASP Foundation Meetup OWASP Paris (22/06/2021) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. meetup owasp paris foundation https://speakerdeck.com/owaspmoscow/following OWASP Moscow (@owaspmoscow) Follows - Speaker Deck owasp moscow follows speaker deck https://owasp.org/www-community/attacks/Forced_browsing Forced browsing | OWASP Foundation Forced browsing on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. forced browsing owasp foundation https://plugins.jetbrains.com/plugin/21353-owasp-ide-vulscanner OWASP IDE-VulScanner - IntelliJ IDEs Plugin | Marketplace OWASP IDE-VulScanner is an AI-powered security scanner for your IDE. It combines OWASP Dependency-Check (SCA) and Semgrep (SAST) to detect vulnerabilities in... owasp ide intellij plugin marketplace https://owasp.org/donate/?reponame=www-project-top-10-privacy-risks&title=OWASP+Top+10+Privacy+Risks Donate to Open Source Security Projects | OWASP Foundation Donate to Open Source Security Projects on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of... open source security donate to projects owasp foundation https://owasp.org/awards/ Achievements and Awards | OWASP Foundation Achievements and Awards on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. achievements and awards owasp foundation https://owasp.org/www-project-web-security-testing-guide/v41/5-Reporting/README WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://app.media.ccc.de/c/god2024 German OWASP Day 2024 - media.ccc.de Video Streaming Portal des Chaos Computer Clubs german owasp day media ccc https://mas.owasp.org/news/archive/2019/ 2019 - OWASP Mobile Application Security mobile application owasp security https://owasp.org/www-project-untrust/ OWASP untrust | OWASP Foundation OWASP-Untrust replaces risky base programming constructs with secure, validated types (e.g., BoxedPath, BoundedString) to enforce safety and prevent... owasp foundation https://board.owasp.org/meetings-historical/2023/202303.16.html March 2023 Videoconference | OWASP Foundation March 2023 Videoconference on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. march videoconference owasp foundation https://depscan.readthedocs.io/migrate-v5-to-v6/ Migrate from depscan v5 to v6 | OWASP dep-scan Use this document as a reference to migrate your depscan v5 workflows to v6. migrate from owasp dep scan https://aws.amazon.com/marketplace/reviews/reviews-list/B081SK32C7?rating=4&sort=NEWEST&filter=ALL&page=2 AWS Marketplace: Fortinet Managed Rules for AWS WAF - Complete OWASP Top 10 Reviews aws marketplace managed rules https://nettacker.readthedocs.io/en/latest/Developers/ Contributing - OWASP Nettacker Documentation contributing owasp documentation https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/01-Information_Gathering/08-Fingerprint_Web_Application_Framework WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://cwe.mitre.org/data/definitions/1035.html CWE - CWE-1035: CWE CATEGORY: OWASP Top Ten 2017 Category A9 - Using Components with Known... Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses. owasp top ten https://owasp.org/donate/?reponame=www-project-mcp-top-10&title=MCP06%3A2025+%E2%80%93+Intent+Flow+Subversion Donate to Open Source Security Projects | OWASP Foundation Donate to Open Source Security Projects on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of... open source security donate to projects owasp foundation https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/06-Session_Management_Testing/04-Testing_for_Exposed_Session_Variables WSTG - Latest | OWASP Foundation WSTG - Latest on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. latest owasp foundation https://devguide.owasp.org/en/05-implementation/02-dependencies/02-dependency-track/ Dependency-Track - OWASP Developer Guide OWASP Foundation Developer Guide project dependency track owasp developer guide https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/11-Client_Side_Testing/08-Testing_for_Cross_Site_Flashing WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/03-Identity_Management_Testing/01-Test_Role_Definitions WSTG - v4.1 | OWASP Foundation WSTG - v4.1 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation https://devguide.owasp.org/en/04-design/02-web-app-checklist/07-access-controls/ Enforce Access Controls - OWASP Developer Guide OWASP Foundation Developer Guide project access controls enforce owasp developer guide https://www.businesswire.com/news/home/20250305353933/en/Cycode-SAST-Leaves-Competitors-Behind-with-94-Fewer-False-Positives-in-OWASP-Benchmark Cycode SAST Leaves Competitors Behind with 94% Fewer False Positives in OWASP Benchmark Cycode, the leader in Application Security Posture Management (ASPM), today launched its proprietary next-generation SAST engine, achieving a breakthrough 94... https://mas.owasp.org/MASTG/tests/ios/MASVS-STORAGE/MASTG-TEST-0313/ MASTG-TEST-0313: References to APIs for Preventing Keyboard Caching of Text Fields - OWASP Mobile... https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/ WSTG - Latest | OWASP Foundation WSTG - Latest on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. latest owasp foundation https://owasp-academy.teachable.com/courses/sql-master-course/lectures/1354156 12.Command for time based injection | OWASP ONLINE ACADEMY Mastering SQL Injection for time command based injection owasp https://wiki.owasp.org/index.php/OWASP:Privacy_policy OWASP:Privacy policy - OWASP owasp privacy policy https://owasp.org/www-project-top-ten/?ref=labs.lares.com OWASP Top Ten Web Application Security Risks | OWASP Foundation The OWASP Top 10 is the reference standard for the most critical web application security risks. Adopting the OWASP Top 10 is perhaps the most effective first... owasp top ten web application security risks foundation https://mas.owasp.org/MASTG/demos/ios/MASVS-CODE/MASTG-DEMO-0052/MASTG-DEMO-0052/ MASTG-DEMO-0052: Scanning Package Manager Artifacts for Insecure iOS Dependencies - OWASP Mobile... https://www.f5.com/ko_kr/glossary/owasp-top-10-for-agentic-ai-applications OWASP Top 10 for Agentic Applications: Securing Agentic AI with F5 | F5 Learn the OWASP Agentic AI Top 10 risks, why they matter, and how F5 helps secure autonomous AI agents, tools, APIs, and workflows. securing ai owasp top agentic applications https://board.owasp.org/ Global Board | OWASP Foundation Global Board on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. global board owasp foundation https://owasp.org/www-project-web-security-testing-guide/latest/ WSTG - Latest | OWASP Foundation WSTG - Latest on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. latest owasp foundation https://mas.owasp.org/MASTG/demos/android/MASVS-PLATFORM/MASTG-DEMO-0061/MASTG-DEMO-0061/ MASTG-DEMO-0061: Uses of FLAG_SECURE with semgrep - OWASP Mobile Application Security https://board.owasp.org/meetings-historical/2020/202008-special.html August 2020 Videoconference | OWASP Foundation August 2020 Videoconference on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. august videoconference owasp foundation https://media.ccc.de/search?p=OWASP+German+Chapter&sort=asc Search for person "OWASP German Chapter" returned 5 results - media.ccc.de Video Streaming Portal des Chaos Computer Clubs search for german chapter https://devguide.owasp.org/en/07-training-education/03-skf/ SKF - OWASP Developer Guide OWASP Foundation Developer Guide project skf owasp developer guide https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/04-Authentication_Testing/10-Testing_for_Weaker_Authentication_in_Alternative_Channel WSTG - v4.2 | OWASP Foundation WSTG - v4.2 on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. owasp foundation