owasp-asvs

Compliance evidence for HTTP header security. Assesses both sides of the exchange — the request headers an attacker manipulates and the response headers you must send — confirms every finding with a second probe, maps it to OWASP ASVS 5.0 and PCI DSS 4.0.1, and reports what it could not assess instead of counting it as a pass.

ByteGuard Codex is an application security tool for managing OWASP ASVS-based standards and mapping them to your software projects.

AI-powered pentesting automation with MCP integration for Claude Code - parallel scanning, OWASP ASVS 5.0, workflow recording/replay

Pre-planning knowledge injection layer for AI coding — 314 Mandatory/Conditional/Flag-and-Defer items across 7 senior-engineering roles, filtered by 6 project profiles, distributed via 5 tool integrations + Claude Code plugin.

Interactive single-file guide to building a production-grade, secure PHP platform from zero (HR example). 30 stations, OWASP ASVS 5.0, ISO family, multi-region standards.

A stack-agnostic web application penetration testing checklist based on OWASP WSTG, ASVS, PTES & NIST.

One standard and one memory for any coding agent — 138 rules, four levels from memory to enforcement, and a zero-dependency CLI that runs before the first line of code.

IoT threat modeling and OWASP ASVS-based security assessment of a ThingsBoard smart factory setup - M.Sc. Cyber Security coursework

Deliberately vulnerable web application demonstrating OWASP ASVS Level 1 security issues for educational purposes, built with React, NestJS, and MySQL.

Redacted auth and session hardening engagement: from reactive fixes to a proactive security-ownership program on an AI companion platform.

Redacted secure-by-design engagement: threat model to traced security requirements to pre-launch verification for an EdTech platform.

Redacted cryptographic and key-management review of an end-to-end encrypted digital legacy platform: verifying a zero-knowledge claim technically, not just accepting it.

Derives tailored security requirements for a service from NIST CSF 2.0, SP 800-53, and OWASP ASVS. Prescriptive, not vulnerability discovery.