Appsec
7 items tagged with "appsec"
Standards2
OWASP Application Security Verification Standard (ASVS) 5.0
A framework of security requirements for designing, building, and testing modern web applications and services.
OWASP Top 10:2025
The ten most critical web application security risks, refreshed from contributed vulnerability data. The 2025 edition adds Software Supply Chain Failures and Mishandling of Exceptional Conditions, keeps Broken Access Control at number one, and absorbs server-side request forgery into it.
FAQs5
What is the difference between SAST and DAST?
SAST (Static Application Security Testing) analyzes source code, bytecode, or binaries without running the application, finding flaws like injection o...
What is threat modeling?
Threat modeling is a structured exercise to identify potential threats, attack vectors, and weaknesses in a system before they are exploited, ideally ...
What is a WAF (web application firewall)?
A web application firewall inspects HTTP/HTTPS traffic between clients and a web application and filters or blocks malicious requests before they reac...
What is the OWASP Top 10?
The OWASP Top 10 is a widely referenced, regularly updated list published by the Open Worldwide Application Security Project that ranks the most criti...
What is penetration testing?
Penetration testing is an authorized, simulated attack on a system, network, or application performed by security professionals to find and safely exp...