Cyver core supports the OWASP Application Security Verification Standard (ASVS) Checklist, including versions 4.0 (Levels 1, 2, and 3) and 5.0 (Levels 1, 2, and 3).
The ASVS is a foundational resource for developers, security professionals, and organizations looking to establish a high level of confidence in the security of their web applications.
General Information on the OWASP ASVS
The OWASP Application Security Verification Standard (ASVS) Project aims to normalize the coverage and rigor of web application security verification by providing a commercially-workable open standard.
What is the ASVS?
The ASVS serves two primary functions:
- Testing Web Application Security: It provides a basis for testing an application's technical security controls, as well as any environmental technical security controls relied upon to protect against common vulnerabilities like Cross-Site Scripting (XSS) and SQL Injection.
- Guidance for Secure Development: It offers developers a comprehensive list of requirements for building secure applications.
Key Objectives of the ASVS
The requirements in the ASVS were developed with three main objectives in mind:
- Use as a Metric: To give application developers and owners a clear yardstick to assess the degree of trust that can be placed in their web applications.
- Use as Guidance: To provide direction to security control developers on what features and controls to build to satisfy modern application security requirements.
- Use During Procurement: To offer a basis for specifying rigorous application security verification requirements in contracts and agreements.
Download
You can directly download the latest OWASP ASVS Checklists from our GitHub repository: