About us
The OWASP Foundation came online on December 1st, 2001 it was established as a not-for-profit charitable organization in the United States on April 21, 2004, to ensure the ongoing availability and support for our work at OWASP. OWASP is an international organization and the OWASP Foundation supports OWASP efforts around the world. OWASP is an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted. All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security. We advocate approaching application security as a people, process, and technology problem because the most effective approaches to application security include improvements in all of these areas. We can be found at www.owasp.org.
OWASP is a new kind of organization. Our freedom from commercial pressures allows us to provide unbiased, practical, cost-effective information about application security. OWASP is not affiliated with any technology company, although we support the informed use of commercial security technology. Similar to many open-source software projects, OWASP produces many types of materials in a collaborative and open way. The OWASP Foundation is a not-for-profit entity that ensures the project's long-term success.
Upcoming events
1
Netlight x OWASP Stockholm
Netlight Consulting AB, Regeringsgatan 25, 111 53 Stockholm, Sweden, Stockholm, SE📢 Important news: Meetup will be decommissioned at the end of the year, so RSVP will be moving to our OWASP Chapter page then. To stay updated on future events, join the chapter here:
đź”— https://owasp.org/chapters/stockholmJoin us for an exciting afterwork event in collaboration with Netlight. In attendance will be leaders from the OWASP Stockholm chapter, Netlight clients, security professionals from Stockholm and the OWASP Stockholm community!
Whether you're deep in the security world or just getting started, this is a chance to connect with the community, hear from practitioners working on real problems, and dig into topics that matter.
When? Monday, 9 November
Where? The Bistro, Netlight Office, Regeringsgatan 25 floor 11The evening at a glance:
17:00 — Doors open. Dinner and drinks will be available. Come early, mingle, and meet the community.18:00 — Talks kick off, each being ~30min, followed by a 15min Q&A and break:
- Splitting Secrets — Shamir's Secret Sharing and Zero-Knowledge Proofs, by Filip Nilsson - Security / Platform Engineering @Netlight
- Securing Autonomous Agents, by Kristian Alvarez Jörgensen - Security Architect @Netlight
- OWASP and the CRA: A good match, by Olle Johansson (Consultant, OWASP SBOM and CycloneDX project lead)
20:30 — DJ, drinks, snacks, and mingle!
So don't forget to sign up - spots are limited! - and join us for an evening of talks, good food, and great conversations!
🌟More about the talks:
Olle E. Johansson - OWASP and the CRA: A good match
In this talk Olle E. Johansson will update on the EU CRA legislation and talk about the toolchain and projects needed to manage vulnerabilities. The Cyber Resilience Act (CRA) aims to safeguard consumers and businesses buying software or hardware products with digital elements. The CRA entered into force on 10 December 2024. The main obligations introduced by the Act will apply from 11 December 2027, with reporting obligations to apply as of 11 September 2026. One of the focus areas is vulnerability management. To keep a product secure during its lifetime, all 3rd party components will have to be monitored and up to date. At the heart of this process is the Software Bill of Materials, SBOM, which is used to monitor for known vulnerabilities in both Open Source and commercial components. The talk will cover projects such as OWASP ECMA TC54 - PURL, CycloneDX, CLE and TEA that fit right in with CycloneDX working with various kinds of bill-of-materials for a long time.Filip Nilsson - Splitting secrets: Shamir’s Secret Sharing and Zero-Knowledge Proofs
How can you share a secret without revealing it, or prove you know something without showing what it is? Through two hands-on hobby projects, Filip will explore the fascinating world of cryptography, demonstrating how Shamir’s Secret Sharing and Zero-Knowledge Proofs work in practice and how these seemingly magical concepts can solve real-world problems.Kristian Alvarez Jörgensen - Securing autonomous agents
Organizations are rushing into incorporating autonomous agents into their day to day operations, but little consideration has generally gone into how those systems should be secured. Kristian will dive into the unique challenges that attempting to secure agents presents and explore what potential solutions and tools that exist.About the speakers
Olle E. Johansson
Olle E. Johansson is a consultant in the area of realtime communication and in embedded system security. He has been active in Open Source for many years as a developer, evangelist, trainer and speaker in many conferences worldwide. Olle is a member of the OWASP SBOM Forum and the OWASP CycloneDX industry working group. He is currently working on the CycloneDX Transparency Exchange API standard. Olle is currently a project leader for the Swedish DNS TAPIR project that is building Open Source software for analysing DNS resolver logs and finding bad actors.Filip Nilsson
Filip Nilsson is a Platform/Security Engineering Expert at Netlight, specializing within cloud and platform security.Kristian Alvarez
Kristian Alvarez is a Security Architect at Netlight specializing in security architecture and resident threat modeling evangelist.55 attendees
Past events
41
