ASVS

Tech stack & purpose

The OWASP Application Security Verification Standard (ASVS) is an open standard that defines comprehensive security requirements for designing, developing, and testing modern web applications and services. Originally launched in 2008 through global community collaboration, the project provides a structured framework for application security verification across all types of web apps. The current version 5.0 was released in May 2025 and is led by project leaders Daniel Cuthbert, Josh Grossman, and Elar Lang, supported by the ASVS Working Group. The standard is available in multiple formats including PDF, Word, and CSV, with community translations in Turkish, Russian, French, Korean, and Brazilian Portuguese.

Languages

Contributors (top 30 of 143)

• Josh Grossman1,056 commits
• Elar Lang538 commits
• Jim Manico427 commits
• Andrew van der Stock296 commits
• tghosth119 commits
• Daniel Cuthbert108 commits
• Luis Servin67 commits
• ike54 commits
• Tonimir Kisasondi49 commits
• Gabriel Corona46 commits
• Servin Valencia31 commits
• Ralph Andalis25 commits
• clallier9424 commits
• Ryan Armstrong21 commits
• Joseph Kerby21 commits
• Iman17 commits
• Ron Perris17 commits
• Isaac Lewis16 commits
• Sandro Gauci16 commits
• JoergBruenner13 commits
• inaz012 commits
• Abhay Bhargav11 commits
• 
  Sjoerd Langkemper11 commits · 207 followers
• Mark C10 commits
• Mark Burnett10 commits
• Benedikt Bauer9 commits
• Oleksii9 commits
• Sebastien gioria9 commits
• 
  dependabot[bot]8 commits · 0 followers
• AtlasHackert7 commits