Overview

Verification is one of the business functions described by the OWASP SAMM. The verification activities are wide ranging, and will include:

• Testing of security controls
• Review of controls and security mechanisms
• Evaluation and assessment of the security architecture
• and others

Given the breadth of techniques and knowledge required, guides are an important resource for verification activities.

---

The OWASP Developer Guide is a community effort; if there is something that needs changing then submit an issue or edit on GitHub.