Tuesday, May 5, 2026

The OWASP Foundation is entering a defining moment.

This strategic plan outlines how OWASP will move from being a recognized voice in security to a truly transformative force in the industry.

Inside this document, you’ll find a clear roadmap for tackling one of the most urgent challenges of our time: eliminating insecure software at scale.

What You’ll Learn:

This strategic plan provides a comprehensive look at how OWASP will drive meaningful, lasting impact through these five strategic areas:

Why This Matters:

Software insecurity isn’t just a technical issue; it’s a global risk.

It affects businesses, governments, and individuals alike, costing billions, eroding trust, and exposing critical systems to failure. OWASP’s strategy addresses these challenges head-on by combining community, education, and open innovation into a unified approach.

This isn’t just a plan, it’s our call to action for anyone invested in the future of secure software.

Download the Strategic Plan

Get the full document to explore OWASP’s vision, mission, and five strategic priorities in detail.

OWASP Foundation Strategic Plan

Be Part of the Mission

OWASP is powered by a global community. Whether you contribute to our Projects and Chapter, share knowledge, or support initiatives, your involvement helps move the world closer to secure software for all.

About the OWASP Foundation

Our vision - “No more insecure software.”

The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation that works to improve software security. Our programming includes:

• Community-led open-source projects, including code, documentation, and standards
• Over 250+ local chapters worldwide
• Tens of thousands of members and participants
• Industry-leading educational and training conferences

We are an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted. Our projects, tools, documents, forums, and chapters are free and open to anyone interested in improving application security. The OWASP Foundation launched on December 1st, 2001, becoming incorporated as a United States non-profit charity on April 21, 2004.

Corporations, foundations, developers, and volunteers have supported the OWASP Foundation and its work for two decades. Donate, become a Member, or a Corporate Supporter today.

For further inquiries, please contact:

Andrew van der Stock

Executive Director, [email protected]

Stay tuned for more exciting updates. Follow OWASP on LinkedIn, Mastodon, and X