Open Web Application Security Project

General

Used as filename or fragment reference: owasp
Common Name: OWASP
Legal Name: Open Web Application Security Project
Website: https://www.owasp.org/
Location: US
State: MD
Accepts new projects?: yes
Software Types: security
Wikidata ID: Q379297

Governance

Board Size: 7
Board Type: elected
Board Website: https://www.owasp.org/index.php/Board
Bylaws Website: https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project#OWASP_Foundation_Bylaws
Approx Number Of Paid Staff: 7
Example Projects Hosted: OWASP Top 10, CSRFGuard, Zed Attack Proxy
Project List Website: https://www.owasp.org/index.php/Category:OWASP_Project
Services Provided: OWASP acts as a financial steward and provides coordination services between projects.
Nonprofit Type: Nonprofit501c3
Governance documentation (when available): Search for docs on FOSS Governance

Funding

Budget in USD: 2.5M
Budget Website: https://www.owasp.org/index.php/About_OWASP/Financial_Transparency
Funding Sources: sponsors, donations
Sponsor List Website: https://www.owasp.org/index.php/Acknowledgements
Example Sponsors: Adobe, CME Group, Fortify, Qualys, Salesforce, Security Innovation, Signal Sciences, waratek
Sponsorship Model(s): owasp

Policy

Licenses Used: various
CLA Policy: CLA
Code Of Conduct Website: https://owasp.org/www-policy/operational/code-of-conduct
Source Of Code Of Conduct: None, but Board CoC is posted
Where Code Of Conduct Linked: x

Trademark

Primary Brand Name: OWASP
Secondary Brand Name(s): various projects - dozens+
Is Primary Brand Registered?: no
Trademark Policy Website: https://www.owasp.org/index.php/Marketing/Resources
Official Logo Link: https://www.owasp.org/images/e/e6/Owasp_logo_icon.jpg
Is Logo Registered?: no

---

OWASP is a charitable organization focused on improving the security of software.