The Open Web Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of application software.
An OWASP project is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories:
- PROTECT – These are tools and documents that can be used to guard against security-related design and implementation flaws.
- DETECT – These are tools and documents that can be used to find security-related design and implementation flaws.
- LIFE CYCLE – These are tools and documents that can be used to add security-related activities into the Software Development Life Cycle (SDLC).
See a list of OWASP projects here.