Category:OWASP Legal Project

Welcome to the OWASP Legal Project

The OWASP Legal project provides materials related to the legal aspects of secure software, including contracting, liability, and compliance. Read about our plans in the OWASP Legal Project Roadmap.

OWASP Secure Software Contract Annex
The initial project is a 'Secure Software Contract Annex' that helps software buyers and vendors discuss security and capture the important terms. This project should not be considered legal advice, and we strongly recommend that you find competent counsel to assist with your contract negotiations. The contract annex has been place in the public domain to facilitate use in private contracts.


 * OWASP Secure Software Contract Annex
 * Secure software contracting hypothetical case study

You can download the Microsoft Word version and modify it to suit your needs. Please consider contributing back any enhancements you make.

Feedback and Participation
We hope you find the OWASP Secure Software Contract Annex useful. Please contribute back to the project by sending your comments, questions, and suggestions to owasp@owasp.org. To join the OWASP Legal mailing list or view the archives, please visit the subscription page.

Project Contributors
The Legal project lead is Jeff Williams of Aspect Security. He can be reached at jeff.williams 'at' owasp.org.

Project Sponsors
The OWASP Legal project is sponsored by https://www.owasp.org/images/d/d1/Aspect_logo.gif