The Open Web Application Security Project, or OWASP, is an international non-profit organization dedicated to web application security. One of OWASP’s core principles is that all of its material be freely available and easily accessible on its website, making it possible for anyone to improve their own web application security. The material it offers includes documentation, tools, videos, and discussion forums. Its best-known project is the OWASP Top 10, a regularly updated report, outlining security concerns for web application security and focusing on the 10 most critical risks. The report is put together by a team of security experts from all over the world.

The OWASP testing and code review guides supply developers with beneficial information for assessing software. The testing guide contains information that organizations can use to apply techniques for identifying common web application or service security issues. Organizations may also refer to the OWASP code review guide to implement practices for creating more secure software. OWASP recommends that web developers should implement logging and monitoring as well as incident response plans to ensure that they are made aware of attacks on their applications.