Webappsec.org Website Review

Web Application Security Consortium The Web Application Security Consortium (WASC) is 501c3 non profit made up of an international group of experts, industry practitioners, and organizational representatives who produce open source and widely agreed upon best-practice security standards for the World Wide Web. As an active community, WASC facilitates the exchange of ideas and organizes several industry projects. WASC consistently releases technical information, contributed articles, security guidelines, and other useful docu*entation. Businesses, educational institutions, governments, application developers, security professionals, and software vendors all over the world utilize our materials to as*ist Volunteering to participate in WASC related activities is free and open to all. If you're interested in website or application security you can first subscribe to our mailing list 'The Web Security Mailing List contact the project leader listed on the page. If you're interested in creating a project first review our charter Interested in application security and want to help? For starters consider subscribing to The Web Security Mailing List help us by contributing to one of the projects below. Simply go to the project you wish to help on, and contact the project leader. Joining WASC COSTS YOU NOTHING. Do you want to work on a new project not listed here? Please contact us using our contact form 'Guest Articles' by industry professionals on the latest in trends, techniques, defenses, best practices and lessons learned relevant to Consortium project dedicated to maintaining a list of web applications related security incidents. WHID goal is to serve as a tool for raising awareness of the web application security problem and provide the information for statistical an*lysis of web applications security The Web Application Security Evaluation Criteria is a set of guidelines to evaluate web application security scanners on their against him - the Open Proxy server. Instead of being the target of the attacks, we opt to be used as a conduit of the attack data in