OWASP Mobile Application Security Verification Standard (MASVS)

This is the official Github Repository of the OWASP Mobile Application Security Verification Standard (MASVS). The MASVS establishes baseline security requirements for mobile apps that are useful in many scenarios. You can use it:

• As a metric - To provide a security standard against which existing mobile apps can be compared by developers and application owners.
• As guidance - To provide guidance during all phases of mobile app development and testing.
• During procurement - To provide a baseline for mobile app security verification.

The MASVS is a sister project of the OWASP Mobile Application Security Testing Guide.

• 🌐 Access the MASVS Web
• ⬇️ Download the latest PDF
• ✅ Get the latest Mobile App Security Checklists
• ⚡ Contribute!
• 💥 Play with our Crackmes

Trusted by …

The OWASP MASVS and MASTG are trusted by the following platform providers and standardization, governmental and educational institutions. Learn more.

🥇 MAS Advocates

MAS Advocates are industry adopters of the OWASP MASVS and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. Learn more.

Connect with Us

• 🐞 Report an error (typos, grammar) or fix it on a Pull Request.
• 💬 Give feedback.
• 🙏 Ask questions

Contribute with content:

• 💡 Propose ideas or suggest improvements (if it qualifies we’ll promote it to an Issue)
• 📄 Create a Pull Request for concrete fixes (e.g. grammar/typos) or content already approved by the core team.

Before you start contributing, please check our contribution guide which should get you started. If you have any doubts please contact us.