OWASP
OWASP ASVS Controls
The Application Security Verification Standard defines testable security requirements across 14 chapters and three verification levels. Referenced here at chapter level — exact control IDs shift between ASVS point releases, so verify individual control text against the linked source before citing it in an audit.
Entries
OWASP ASVS Controls Reference Entries
3 of 3 entries
ASVS
V2ASVS V2: Authentication
Requirements for how an application verifies identity — credential handling, multi-factor authentication, and session initiation.
ASVS
V9ASVS V9: Communications
Requirements for protecting data in transit — TLS version, certificate validation, and cleartext traffic prevention.
ASVS
V14ASVS V14: Configuration
Requirements covering build and deployment configuration — debug flags, exported components, and backup exposure.