OWASP/ASVS resource

Health v2 · maintenance only

Adoption not part of the score

3571 stars · 833 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

The OWASP Application Security Verification Standard (ASVS) is an open standard defining a comprehensive set of security requirements for designing, developing, and testing web applications and services. It is maintained as a community-driven document published in PDF, Word, and other formats.

Use cases

• define security requirements for a web application
• audit an app against a security verification standard
• create a security testing checklist for web services
• benchmark vendor application security claims
• guide secure development practices for a dev team

When to choose

• you need an authoritative, community-maintained baseline of application security requirements
• you are performing security assessments or pen tests of web apps and want structured coverage levels
• you want to write procurement or compliance security requirements

When to avoid

• you need an automated scanning or testing tool rather than a written standard
• you need security requirements for non-web software like embedded or mobile-only systems without adaptation
• you want executable code or libraries - this is a specification document

Facets

learning-resource · maturity active

security documentation security web-development testing cross-platform owasp security-requirements verification-standard appsec checklist

Member repositories

For agents

markdown · JSON · MCP: product_card(name="OWASP/ASVS")