Developer Guide
summary
OWASP Developer Guide presents a compact, practical roadmap for writing secure applications: concrete fixes (query parameterization, input validation), an implementation list (ASVS, MASVS, SKF and tools like kopia, Thread Dragon), and example integrations such as cyclone and secure headers. It states what it omits — no deep dives or reinvented specs — and notes gaps (verification metrics sparse). The repo asks for volunteers to review, add missing content, and validate whether guidance actually prevents rework.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:11Why developers need security guide
- 2:37Applications and their security risks
- 4:25Insecure code and SQL injection
- 6:11Secure coding misconceptions
- 8:45Costs of insecure code
- 10:35Developer's role in security
- 11:18What the guide provides
- 12:46Contributing to the guide
- 13:29Closing remarks
related talks
57mThe Developer's Field Guide to Software Security
45mOWASP for Developers
39mOWASP-SKF Making the web secure by design
38mFree security resources that your competitors use!
23mWeb Application Security - owasp top 10 vulnerabilities
52mAppSec: From the OWASP Top Ten(s) to the OWASP ASVS
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
20mFlagship Projects: Web Security Testing Guide