The OWASP Application Security Verification Standard (ASVS) not only provides a list of security requirements that a development team should follow but can also be used as a checklist for a QA team to do verification and assess the security level of the application. Please refer to the project source at https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project.
Security requirements for web applications
OWASP Application Security Verification Standard (ASVS)
The OWASP ASVS defines the following security requirements at the time of writing, in 2018. Some section numbers were skipped because they were incorporated into other sections:
- ASVS V1 Architecture
- ASVS V2 Authentication
- ASVS V3...
