4 ms·

So OWASP compliance is a thing as much as GDPR compliance in the enterprise world?

• ownagefool 7y ago
  Not really. GDRP results in major fines thus has major funding. OWASP is something someone might tack on, but most of the people involved have little to no ability to check.
• tptacek 7y ago
  No. There is no such thing as OWASP certification. The only teeth OWASP "compliance" might have is a contractually agreed MUSTFIX disposition for vulnerabilities that are on the OWASP Top 10 (which would be pretty silly and is not something I've ever seen done).