Crest announces OVS programme in collaboration with OWASP

Aug 04, 2022 | Andrew Gordon-Brooks

CREST, an international not-for-profit, membership body representing the global cyber security industry, has just announced their OWASP Verification Standard (OVS) programme, heralding a new quality assurance benchmark for the global application security industry.

Developed in consultation with the OWASP (Open Web Application Security Project) Foundation, the programme “provides mobile and web app developers with greater security assurance and accredited organisations with enhanced access to the growing app development industry.”

Underpinned by OWASP’s Application Security Verification Standard (ASVS) and Mobile Application Security Verification Standard (MASVS) the OVS programme furthers their mission of building trust in the digital world by raising professional standards and delivering measurable quality assurance for the global cyber security industry.

Secure Delivery has long advocated the value of ASVS and MASVS over traditional penetration testing and, with strong links to the OWASP Foundation, will be pleased to add its name to CREST’s register of trusted providers.

Grant Ongers, CTO and founder of Secure Delivery, and OWASP vice-chair said: “As one of the co-leaders of the OWASP Application Security Curriculum project (building materials off the ASVS) and as a staunch advocate for the adoption of the (M)ASVS instead of traditional penetration testing methods I applaud this news. CREST will hopefully help bring OWASP actual best practice standards for what it takes to build a secure system into how those systems are tested.

Who would have thought that back in 2017 when we performed our first ASVS review with a client in place of a traditional penetration test that one day the rest of the world would see the huge advantages in doing it this way!”

suggested articles

We're attending Money 20/20 Europe
June 6, 2022

We'll be in Amsterdam from June 7th - June 9th for Money20/20 Europe! Come and chat with us about modern security practices for fintechs, or anything else that's on your mind.

Our online threat modeling tool hits 1000 players!
June 1, 2022

We built an online agile threat modelling tool last year to help teams play Cornucopia and Elevation of Privilege remotely and it just hit 1000 all-time players. Thanks to all 1000 of you!

We're hiring! Come and join us!
May 31, 2022

Our growing business has some open positions and one might just be waiting for you! Read on to find out who we're looking for and why you should hang out with us.