This technology agnostic document defines a set of general software security coding practices, in a checklist format, that can be integrated into the software development lifecycle.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the …

The ASVS can be used to provide a framework for an initial checklist, according to the security verification level, and this initial ASVS checklist can then be expanded using the following checklist …

This technology agnostic document defines a set of general software security coding practices, in a checklist format, that can be integrated into the software development lifecycle.

It focuses on the need for developers to be aware of the security implications of their code and to take steps to ensure that their code is secure. This includes using secure coding practices, testing for …

OWASP Code Review Guide on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

Refer to proactive control C5: Secure By Default Configurations and the Infrastructure as Code Security Cheatsheet for more context from the OWASP Top 10 Proactive Controls project, and use the lists …

Prácticas de Codificación Segura on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

The OWASP Secure-by-Design Framework provides practical guidance to embed security into software architecture from the start—long before code is written.

The OWASP Developer Guide is a community effort; if there is something that needs changing then submit an issue or edit on GitHub.