thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

OWASP Application Security Verification Standard (ASVS)

An OWASP standard listing testable security requirements for web applications and services at three verification levels.

Definition

ASVS (version 5.0 released 2025) organizes hundreds of requirements into chapters such as authentication, session management, access control, validation and cryptography. Level 1 is a minimum baseline, Level 2 is recommended for most applications handling sensitive data and Level 3 is for critical applications. It is used for requirements, testing scope and procurement.

Example

A procurement contract requires vendors to meet ASVS Level 2.

Exam tip

ASVS defines what to verify; the OWASP Web Security Testing Guide defines how to test.

Related terms