What is OWASP?
⚡
Quick Answer
OWASP (Open Worldwide Application Security Project) is a nonprofit that publishes free application-security guidance, most famously the OWASP Top 10 list of critical web vulnerabilities.
Detailed Answer
Beyond the Top 10 (injection, broken access control, etc.), OWASP provides tools and standards like ZAP (a DAST scanner), the ASVS verification standard, dependency-check, and cheat sheets. It is the common reference point for what to test and defend against in appsec.
💡
Interview Tip
Name the OWASP Top 10 and a concrete OWASP tool (ZAP) — shows familiarity beyond the acronym.
owaspsecurityappsec