Industry consortium

Open Worldwide Application Security Project

OWASP is a community-driven nonprofit that publishes free security resources, including the Top 10 web-application risks, the Application Security Verification Standard, and the Secure Headers project.

Short name: OWASP
Scope: Industry consortium
Homepage: owasp.org
Standards governed: 1

Standards governed by OWASP

Modern HTTP security headers OWASP Secure Headers Project global Security HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. The six headers every modern site should ship.