OWASP ASVS: Application Security Verification Standard
Use ASVS as a checklist for security requirements across authentication, session management, and data protection.
What is OWASP ASVS?
The Application Security Verification Standard (ASVS) is a framework of security requirements for web applications. It provides three verification levels (L1, L2, L3) and over 200 detailed security controls organized into chapters covering all aspects of application security.
ASVS Verification Levels
L1 applies to all applications — basic security controls. L2 is for applications handling sensitive data — most requirements. L3 is for high-assurance applications (financial, healthcare) requiring the most rigorous verification. Most teams target L2.
All lessons in this course
- Input Validation and Output Encoding
- Secure Dependency Management
- OWASP ASVS: Application Security Verification Standard
- Secure Code Review Techniques