What Is the OWASP - Open Web Application Security Project?

OWASP is an open-source community project turned nonprofit organization that provides unbiased and practical, cost-effective information about computer and internet applications.

It helps organizations develop, purchase and maintain software applications that can be trusted and knowledge-based documentation for web application security. Some projects include: a guide to define security requirements to build secure web applications; developing an industry standard testing framework for web application security;  VulnXML - a standard data exchange format to allow commercial, open source and research tools to communicate and interoperate; Web Scarab - an open-source enterprise-level web application scanner; developing a component-based approach to filtering malicious input and output to a web application; and Web Maven - an intentionally insecure internet bank users can download and learn from.

All project software and documentation is released under the GNU GPL, and the project is staffed entirely from volunteers.