Category:OWASP Guide Project

Revision as of 15:34, 12 November 2009 by Deleted user (talk | contribs)

Jump to: navigation, search


OWASP Documentation Project

Guide to Building Secure Web Applications and Web Services (Development Guide)

The Development Guide is aimed at architects, developers, consultants and auditors and is a comprehensive manual for designing, developing and deploying secure Web Applications and Web Services. The original OWASP Development Guide has become a staple diet for many web security professionals. Since 2002, the initial version was downloaded over 2 million times. Today, the Development Guide is referenced by many leading government, financial, and corporate standards and is the Gold standard for Web Application and Web Service security. You can download it here.

The Development Guide is also online on the wiki. Here is the Table of Contents.

How the Development Guide Works

The Development Guide provides practical guidance and includes J2EE, ASP.NET, and PHP code samples. The Development Guide covers an extensive array of application-level security issues, from SQL injection through modern concerns such as phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.

Latest News


More About the Development Guide

  • One Page Datasheet (Under Construction)

Related projects


Download the Development Guide

Download the Development Guide now, for free, here.

Online Version

The Development Guide is also online on the wiki. Here is the Table of Contents.

Other Versions

  • Development Guide 2005 in English (PDF, Word)
  • Development Guide 2005 in Spanish (PDF, Word)
  • Development Guide 2002 in Japanese (PDF)

Earlier Versions

OWASP Books logo.png This project has produced a book that can be downloaded or purchased.
Feel free to browse the full catalog of available OWASP books.


Project News

  • 07/27/2005 - OWASP Developer Guide 2005 version released, announced at Black Hat in Las Vegas.

Weekly Status


  • Andrew van der Stock (2005 Release Version Project Lead)
  • Too many contibutors to list here! This project would not be where it is today without the generous gift of volunteer time and effort from many individuals. Please see the Development Guide for individual acknowledgments!

Project Sponsorship


Users and Adopters

Coming soon! Please let us know how your organization is using the OWASP Development Guide. Include your name, organization's name, and brief description of how you use the annex.

This project licensed under the Licensed under Creative Commons Attribution ShareAlike 3.0.

Articles Below - More About the Development Guide and Using It