OWASP Top Ten Proactive Controls Project - v 3.0 - Foreword - Aim & Objectif

Oct 13, 2026

Upload by Ben

OWASP Top Ten Proactive Controls Project presents a proactive, developer-focused set of security techniques intended for every software development effort. The foreword explains why insecure software threatens critical infrastructure as digital systems grow more complex and interconnected. The document’s aim is to raise awareness by outlining the most important application-security concerns, encouraging early and consistent application of each control throughout development. It also describes the document structure and how the Top 10 list is prioritized and created.

LanguageEnglish

CategoryPresentations

FormatPDF

Pages40

Reading Time14 min

AccessFree to download

Foreword

Aim & Objectif

Call to Action

Project Leaders

Contributors

Document Structure

Introduction

The Top 10 Proactive Controls

How this List Was Created

Target Audience

How to Use this Document

OWASP Top Ten Proactive Controls Project About OWASP The Open Web Application Security Project (OWASP) is a 501c3 non for profit educational charity dedicated to enabling organizations to design, develop, acquire, operate, and maintain secure software. All OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security. We can be found at [www.owasp.org](www.owasp.org). OWASP is a new kind of organization. Our freedom from commercial pressures allows us to provide unbiased, practical, cost effective information about application security. OWASP is not affiliated with any technology company. Similar to many open source software projects, OWASP produces many types of materials in a collaborative and open way. The OWASP Foundation is a not-for-profit entity that ensures the project's long-term success. v 3.0 © 2002-2018 OWASP Foundation This document is licensed under the Creative Commons Attribution-ShareAlike 3.0 license. 2 OWASP Top Ten Proactive Controls Project FOREWORD Insecure software is undermining our financial, healthcare, defense, energy, and other critical infrastructure worldwide. As our digital, global infrastructure gets increasingly complex and interconnected, the difficulty of achieving application security increases exponentially. We can no longer afford to tolerate relatively simple security problems. AIM & OBJECT IF The goal of the OWASP Top 10 Proactive Controls project (OPC) is to raise awareness about application security by describing the most important areas of concern that software developers must be aware of. We encourage you to use the OWASP Proactive Controls to get your developers started with application security. Developers can learn from the mistakes of other organizations. We hope that the OWASP Proactive Controls is useful to your efforts in building secure software. CALL TO ACTION Please don’t hesitate to contact the OWASP Proactive Control project with your questions, comments, and ideas, either publicly to our email list or [privately to](privately to jim@owasp.org)[ jim@owasp.org](privately to jim@owasp.org). COPYRIGHT AND LICENSE This document is released under the Creative Commons Attribution ShareAlike 3.0 license. For any reuse or distribution, you must make it clear to others the license terms of this work. PROJECT LEADERS Katy Anton CONTRIBUTORS Chris Romeo Dave Ferguson Colin Watson Jim Bird Dan Anderson Josh Grossman Rick Mitchell Jim Manico David Cybuck Osama Elnaggar And many more… v 3.0 © 2002-2018 OWASP Foundation This document is licensed under the Creative Commons Attribution-ShareAlike 3.0 license. 3 OWASP Top Ten Proactive Controls Project DOCUMENT STRUCTURE This document is structured as a list of security controls. Each control is described as follows: OWASP Proactive Controls v 3.0 Cx: Control Name Description |

_________________________________________

__________________________________

Implementation | A detailed description of the control including some best practices to consider. | | --- | --- | |
| | __________________________ Vulnerabilities Prevented • • References • • Tools • _____________ • Implementation best practicesand examples to illustrate how to implement each control. List of prevented vulnerabilities or risks addressed (OWASP TOP 10 Risk, CWE, etc. ) List of references for further study (OWASP Cheat sheet, Security Hardening Guidelines, etc. ) Set of tools/projects to easily introduce/integrate security controls into your software. v 3.0 © 2002-2018 OWASP Foundation This document is licensed under the Creative Commons Attribution-ShareAlike 3.0 license. 4 OWASP Top Ten Proactive Controls Project INTRODUCTION The OWASP Top Ten Proactive Controls 2018 is a list of security techniques that should be considered for every software development project. This document is w

FAQs

What is the purpose of the OWASP Top Ten Proactive Controls project?

It aims to raise awareness about application security by describing the most important areas of concern developers should know, encouraging the use of the proactive controls to start secure development.

How are the Top 10 Proactive Controls prioritized?

The list is ordered by importance, with item 1 being the most important.

Who is the primary audience for this document?

The document is primarily written for developers, while development managers, product owners, QA professionals, program managers, and others involved in building software can also benefit.

Oct 13, 2026

Upload by Ben