https://github.com/owasp/owasp-masvs

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
https://github.com/owasp/owasp-masvs

android-app audit gitbook ios-app mastg masvs mobile mstg owasp penetration-testing penetration-tests security security-audit security-standards standard verification

Last synced: about 1 month ago
JSON representation

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

• Host: GitHub
• URL: https://github.com/owasp/owasp-masvs
• Owner: OWASP
• License: cc-by-sa-4.0
• Created: 2016-09-08T06:17:30.000Z (about 8 years ago)
• Default Branch: master
• Last Pushed: 2024-09-04T10:26:49.000Z (2 months ago)
• Last Synced: 2024-10-09T13:43:36.507Z (about 1 month ago)
• Topics: android-app, audit, gitbook, ios-app, mastg, masvs, mobile, mstg, owasp, penetration-testing, penetration-tests, security, security-audit, security-standards, standard, verification
• Language: Python
• Homepage: https://mas.owasp.org/
• Size: 110 MB
• Stars: 2,042
• Watchers: 97
• Forks: 433
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: CONTRIBUTING.md
  • Funding: .github/FUNDING.yml
  • License: License.md
  • Code of conduct: CODE_OF_CONDUCT.md

Awesome Lists containing this project

README

        


# OWASP Mobile Application Security Verification Standard (MASVS)

[![OWASP Flagship](https://img.shields.io/badge/owasp-flagship%20project-48A646.svg)](https://owasp.org/projects/)

[![Creative Commons License](https://img.shields.io/github/license/OWASP/owasp-masvs)](https://creativecommons.org/licenses/by-sa/4.0/ "CC BY-SA 4.0")

[![MASVS Build](https://github.com/OWASP/owasp-masvs/workflows/MASVS%20Build/badge.svg)](https://github.com/OWASP/owasp-masvs/actions/workflows/docgenerator.yml)

[![Markdown Linter](https://github.com/OWASP/owasp-masvs/workflows/Markdown%20Linter/badge.svg)](https://github.com/OWASP/owasp-masvs/actions/workflows/markdown-linter.yml)

[![URL Checker](https://github.com/OWASP/owasp-masvs/workflows/URL%20Checker/badge.svg)](https://github.com/OWASP/owasp-masvs/actions/workflows/url-checker.yml)

This is the official Github Repository of the OWASP Mobile Application Security Verification Standard (MASVS). The MASVS establishes baseline security requirements for mobile apps that are useful in many scenarios. You can use it:

- As a metric - To provide a security standard against which existing mobile apps can be compared by developers and application owners.

- As guidance - To provide guidance during all phases of mobile app development and testing.

- During procurement - To provide a baseline for mobile app security verification.

The MASVS is a sister project of the [OWASP Mobile Application Security Testing Guide](https://github.com/OWASP/owasp-mastg "OWASP Mobile Application Security Testing Guide").













- ⬇️ [Download the latest PDF](https://github.com/OWASP/owasp-masvs/releases/latest)

- ✅ [Get the latest Mobile App Security Checklists](https://github.com/OWASP/owasp-mastg/releases/latest)

- ⚡ [Contribute!](#how-to-contribute)

- 💥 [Play with our Crackmes](https://mas.owasp.org/crackmes)

## Trusted by ...

The OWASP MASVS and MASTG are trusted by the following platform providers and standardization, governmental and educational institutions. [Learn more](https://mas.owasp.org/MASTG/0x02b-MASVS-MASTG-Adoption/).







## 🥇 MAS Advocates

MAS Advocates are industry adopters of the OWASP MASVS and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. [Learn more](https://mas.owasp.org/MASTG/0x02c-Acknowledgements).














## Connect with Us



 GitHub Discussions



  #project-mobile-app-security (Get Invitation)



 @OWASP_MAS  (Official Account)



 @bsd_daemon  (Sven Schleier, Project Lead)  @grepharder  (Carlos Holguera, Project Lead)



## How to Contribute

The MASVS is an open source effort and we welcome all kinds of contributions and feedback.

**Help us improve & join our community:**

- 🐞 [Report an error (typos, grammar)](https://github.com/OWASP/owasp-masvs/issues) or [fix it on a Pull Request](https://github.com/OWASP/owasp-masvs/pulls).

- 💬 [Give feedback](https://github.com/OWASP/owasp-masvs/discussions/categories/general).

- 🙏 [Ask questions](https://github.com/OWASP/owasp-masvs/discussions/categories/q-a)

**Contribute with content:**

- 💡 [Propose ideas or suggest improvements](https://github.com/OWASP/owasp-masvs/discussions/categories/ideas) (if it qualifies we'll promote it to an [Issue](https://github.com/OWASP/owasp-masvs/issues "Github issues"))

- 📄 [Create a Pull Request](https://github.com/OWASP/owasp-masvs/pulls) for concrete fixes (e.g. grammar/typos) or content already approved by the core team.

Before you start contributing, please check our [contribution guide](https://mas.owasp.org/contributing/) which should get you started. If you have any doubts [please contact us](#connect-with-us).