OWASP
Security & Compliance Technologies
OWASP
OWASP is a global, non-profit organization dedicated to improving software security. It provides open standards, tools, and resources—such as the OWASP Top 10—to help organizations build secure applications.
What is it?
OWASP (Open Worldwide Application Security Project) is an open community focused on application security. It produces freely available documentation, methodologies, tools, and best practices for securing software systems.
What does it do?
OWASP defines security risks, publishes guidelines, and maintains projects that help identify and mitigate vulnerabilities. Its resources—like OWASP Top 10, ASVS, and MASVS—serve as industry benchmarks for secure development.
Where is it used?
OWASP standards are used globally by enterprises, startups, auditors, developers, and security teams across web, mobile, API, and cloud-native applications to assess and improve security posture.
When & why it emerged
OWASP was founded in 2001 to raise awareness of application security risks and provide vendor-neutral guidance. It emerged to address the growing impact of insecure software on organizations and users.
Why we use it at Internative
We use OWASP guidelines as a baseline for secure software delivery. Aligning with OWASP standards helps us design, build, and audit applications with proven security practices from day one.
More in Security & Compliance Technologies
Other technologies from the same category of the library.
Trivy
Trivy is an open-source security scanner for containers, Infrastructure as Code, and cloud-native applications. It detects vulnerabilities, misconfigurations, secrets, and license issues across the software supply chain.
Datalust Seq
Datalust Seq is a centralized logging and observability platform designed for structured log analysis. It helps teams collect, search, and visualize application logs in real time to diagnose issues and monitor system health.
Sentry.io
Sentry.io is an application monitoring platform that helps teams detect, diagnose, and fix errors in real time. It provides deep visibility into application performance, crashes, and runtime issues across platforms.
Cloudflare
Cloudflare is a global web performance and security platform that accelerates websites, APIs, and applications. It provides CDN, DDoS protection, WAF, DNS, and edge computing to improve speed, reliability, and security.
Prometheus
Prometheus is an open-source monitoring and alerting system designed for cloud-native environments. It collects time-series metrics via a pull-based model and enables powerful querying and alerting for distributed systems.
Grafana
Grafana is an open-source observability and data visualization platform used to explore, analyze, and monitor metrics, logs, and traces. It enables real-time dashboards and alerts across cloud-native and enterprise systems.