thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

OWASP Top 10 Proactive Controls

OWASP's list of the most important security techniques developers should apply in every project.

Definition

The 2024 Proactive Controls are: implement access control, use cryptography to protect data, validate all input and handle exceptions, address security from the start, secure by default configurations, keep your components secure, implement digital identity, use browser security features, implement security logging and monitoring, and stop server-side request forgery. It is the developer-facing complement to the risk-focused Top 10.

Example

A developer onboarding course is organized around the ten Proactive Controls.

Exam tip

The Top 10 lists risks; the Proactive Controls list defenses.

Related terms