OWASP releases new security standards for app developers

OWASP releases new security standards for app developers

Version 2.1 of the ASVS launched at AppSec EU 2015

The Open Web Application Security Project (OWASP) has released the latest version of the open source Application Security Verification Standards (ASVS).

Version 2.1 of the Standards was launched at the AppSec EU 2015 conference and created by the 40,000 members of OWASP. It said the latest version of the ASVS will allow project teams to embed the security testing checklist into development cycles to verify an app’s built-in security.

The verification Standards principal author, Threat Intelligence principal security consultant and OWASP director, Andrew van der Stock, said Threat Intelligence was committed to the development of the Standards which were specifically designed to fulfil the security verification needs of every app development.

“The release of Version 2.1 is a significant achievement,” he said. “Individuals and organisations worldwide can now make informed decisions about the security risks to software under development.

“The ASVS puts a professional grade checklist into the hands of every project team.”

There are 133 controls within the ASVS. They include authentications, access controls, business logic flaws, data protection, encryption, import validation, cryptography and auditing.

The Standards also cover off mobile application risks.

Van der Stock conducted a two-day ASVS hackathon during the AppSec EU conference.

“The Standards have been refined, with industry consensus, to deliver a new and hugely beneficial approach to software security verification. Crucially, the ASVA will continue to evolve as we leverage feedback from industry and our OWASP membership,” he said.

The ASVS are designed to fulfil security verification needs of app development. They can be scaled for small to large project teams of programmers. Developers are able to choose from and apply the most appropriate of the three levels: auto analysis and verification; identity data; and high risk apps.

Follow Us

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags App DevelopmentOWASPOpen Web Application Security ProjectAndrew van der StockApplication Security Verification StandardsThreat Intelligence principal security consultant



Join key decision-makers within Environmental, Social, and Governance (ESG) that have the power to affect real change and drive sustainable practices. SustainTech will bridge the gap between ambition and tangible action, promoting strategies that attendees can use in their day-to-day operations within their business.

EDGE 2023

EDGE is the leading technology conference for business leaders in Australia and New Zealand, built on the foundations of collaboration, education and advancement.


ARN has celebrated gender diversity and recognised female excellence across the Australian tech channel since first launching WIICTA in 2012, acknowledging the achievements of a talented group of female front runners who have become influential figures across the local industry.

ARN Innovation Awards 2023

Innovation Awards is the market-leading awards program for celebrating ecosystem innovation and excellence across the technology sector in Australia.

Show Comments