NWASP

Northwest Web Application Security Project (NWASP) is a collaborative nonprofit organization focused on improving the security of web applications through research, education, and community-led standards development. It seeks to provide practical guidance for developers, security professionals, and organizations to reduce common web vulnerabilities and associated risks.

NWASP was established in the Pacific Northwest in the early 2010s by a cross-disciplinary group of software engineers, security researchers, and academic researchers. The organization operates as a member-supported network that coordinates research initiatives, publishes guidelines, and maintains open-source tooling. Its activities emphasize reproducible research, real‑world applicability, and collaboration with industry and academia.

Key programs include the development of secure coding guidelines, threat modeling practices, and testing frameworks designed for practitioners. NWASP also runs training programs, hands-on workshops, and annual conferences to disseminate findings and foster professional communities. Its open-source projects cover areas such as application scanning, safe dependency management, and secure development lifecycle tooling.

Governance is organized through a board of directors and a network of technical and regional working groups. Membership categories typically include individual professionals, academic affiliates, and corporate organizations, with varying levels of access to resources, tooling, and event participation. Decision-making emphasizes transparency, reproducibility, and community governance.

NWASP collaborates with other security initiatives and standards bodies, aligning with broader efforts like OWASP top lists, secure software standards, and industry best practices. It aims to complement existing frameworks by emphasizing practical, implementable guidance tailored to modern web technologies. The organization reports progress through published reports, tool releases, and conference proceedings.