OWASP Developer Guide
The OWASP Developer Guide provides an introduction to security concepts and an initial reference for application and system developers.
The content of the Developer Guide aims to be accessible, introducing practical security concepts and providing enough detail to get developers started on various OWASP tools and documents.
The expected audience of the Developer Guide is application developers working in various domains such as web, desktop, mobile, API and cloud.
About OWASP Developer Guide
History
Along with the OWASP Top Ten, the Developer Guide is one of the original resources
published soon after OWASP was formed in 2001.
Version 1.0 of the Developer Guide was released in 2002
and then there were various updates culminating in version 2.0 in 2005.
After discussions and iterations throughout 2023 and 2024, the Developer Guide has now been updated
for the modern security landscape using contributions from the wider application security community.
Periodically the Developer Guide is versioned and the contents promoted to the release area of the repository.
Contributing
Contributions and suggestions are all welcome, we just ask that you follow our code of conduct
and read the contributing guidelines which provide style and document structure suggestions.
We also welcome new issues, changes via a pull request
and discussions in the project wiki and the repo wiki.
The easiest way to get in contact with the development community for this documentation project
is via the OWASP Slack #project-developer-guide project channel (you may need to subscribe first).
OWASP DevGuide: accessible security for developers
Project Resources
Project Information
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.