This repository is now archived. You can still access the downloads but it is read only, the content having been moved to the OWASP project pages.
The latest stable Spanish language version is available on the OWASP project pages along with the latest stable English language version.
There is also a work in progress English language version, which have all been migrated to the OWASP project pages.
OWASP is moving to a 'web first' philosphy and moving away from downloads. We will still be providing PDF and ePub, but the emphasis will be on providing web page documents.
Part of this migration will be the use of the OWASP project page
as the source of the document.
Version 2.0 of this repo will become stable in the OWASP project pages
and work-in-progress will be under draft in the OWASP project pages.
When the migration is complete this repo will be archived as Read Only.
The OWASP Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development life-cycle.
The focus is on secure coding requirements, rather than on vulnerabilities and exploits. It includes an introduction to Software Security principles and a glossary of key terms. It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.
Downloads for the latest version are available for:
- English (en-US)
- español (es-UY)
- 한국어 (ko-KO)
- português (pt-BR & pt-PT)
- 中文 (zh-CN)
The guide is maintained by OWASP, refer to the project page for further information.
- Introduction
- Secure Coding Practices Checklist
- Software Security Principles Overview
- Glossary of important terminology
- Links to useful resources
- Project pamphlet
- Project presentation
- Slide deck - presented by Keith Turpin on OWASP AppSec USA 2010
- Feedback and revisions history
We hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to this project by adding your comments, questions, and suggestions using the change request form. The Secure Coding Practices Guide is international, if you would like to provide additional translations then we can provide the directory framework to support this.
The content has been migrated from the orginal doc format to markdown,
following pandoc's markdown format.
We welcome additions and corrections to the existing documents;
create a pull request and we will review and accept your changes.
- Gerardo Canedo (español)
- Paulo Silva (português)
- Jon Gadsden (English)
