#SPVS
Hardening Developer Machines with OWASP SPVS
Learn how to implement OWASP SPVS V1.2 requirements: from EDR and Full Disk Encryption to CIS Benchmarks.
Read Analysis
Knowledge Base
The Engineering Archive
Found 4 Case Studies
#SPVS
Hardening Identity and Access Management: OWASP SPVS first line of defence
Learn how to harden your CI/CD pipeline and IAM using OWASP SPVS V1.1. Practical guide for secrets encryption, OIDC, MFA enforcement, and automated stale account removal.
Read Analysis
#SPVS
The 5 Stages of SPVS: A Practical Deep Dive
Before we begin hardening a real pipeline, we must first understand its baseline: the five stages. These stages encompass your entire software delivery process, and all of them must be covered.
Read Analysis
#SPVS
The New Security Pipeline Standard: OWASP SPVS 1.0 just released
Securing your codebase is only one part of the security you need on production. If your app code is well-protected but the entire Software Development Lifecycle (SDLC) isn't hardened, an attack is still possible through the delivery of your code into production.
Read Analysis