owasp/asvsApplication Security Verification Standard
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
🎉🎉🎉 Welcome to Version 5.0 of the ASVS! 🎉🎉🎉
Released LIVE on stage at Global AppSec EU Barcelona 2025!
The primary aim of the OWASP Application Security Verification Standard (ASVS) Project is to provide an open application security standard for web apps and web services of all types.
Originally launched in 2008 through a global community collaboration, the ASVS defines a comprehensive set of security requirements for designing, developing, and testing modern web applications and services.
Following the release of ASVS 4.0 in 2019 and its minor update (v4.0.3) in 2021, Version 5.0 represents a significant milestone—modernized to reflect the latest advances in software security.
We gratefully recognize the organizations who have supported the project either through significant time provision or financially on our "Supporters" page!
Please log issues if you find any bugs or if you have ideas. We may subsequently ask you to open a pull request based on the discussion in the issue. We are also actively looking for translations of the 5.n branch.
The project is led by the three project leaders Daniel Cuthbert, Josh Grossman, and Elar Lang.
They are supported by the ASVS Working Group which consists of Shanni Prutchi, Ralph Andalis, Meghan Jacquot, Iman Sharafaldin, Ryan Armstrong, Gabriel Corona, Tobias Ahnoff, and Eden Yardeni.
The latest stable version is version 5.0.0 (dated May 2025), which can be found:
The master branch of this repository will always be the "bleeding edge version" which might have in-progress changes or other edits open. The next release target will be a patch release, version 5.0.1. For details on the ASVS release strategy, see the release strategy section of CONTRIBUTING.md.
The OWASP Community effort with regards to translations is a best effort. Whilst we do our utmost to ensure the content is valid, from a structural perspective, there is only so much we can do to ensure the translations are correct. We rely on you, the community, to help make the ASVS as usable as possible to all around the globe, and translating the main branch into your language is important to the project.
If you think you can help with translations, or indeed ensuring the current list of translations below are correct, we'd love for you to join the community and make the ASVS amazing for all. For more information on translating the ASVS see the translations section of CONTRIBUTING.md.
Currently available translations:
Historic translations of the v4.x versions can be found in the TRANSLATIONS.md file in the 4.0 folder.
