This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity  #ndcconferences  #security  #developer   #softwaredeveloper    

Attend the next NDC conference near you: 
https://ndcconferences.com
https://ndc-security.com/

Subscribe to our YouTube channel and learn every day:  @NDC 

Follow our Social Media!

https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences

#applicationsecurity #sdlc #security #owasp 

ASVS, one of the OWASP Foundation’s flagship projects, has been updated to its first major release since 2021. This update makes the standard easier to adopt while expanding its depth in areas that matter most to modern engineering teams and raising the bar for application security.

ASVS has been reorganized so related controls are easier to navigate and apply, and many requirements are now written in smaller, testable units. Its maturity levels have been rebalanced to make adoption easier. At the same time, v5 expands and clarifies guidance around topics such as modern authentication and API-driven, service-based architectures, reflecting how software is commonly designed and deployed today.

Version 5 combines easier adoption with greater depth in areas that are increasingly relevant to modern systems. In this session, we'll examine the structural changes, review some of the most meaningful content updates to the standard, and discuss what teams should revisit when upgrading from v4 or introducing ASVS for the first time.

What's New in ASVS V5 - Eden Yardeni - NDC Security 2026