Jim Manico -- The #OWASP Cheat Sheet Project

Developers need concrete security answers, but finding trustworthy guidance can take longer than writing the code. Jim Manico explains how the OWASP Cheat Sheet Series turns specialist knowledge into focused, practical references. He describes the project’s origins, the contributors who keep it useful, and how topics move from an idea to reviewed guidance. The conversation explores how developers can navigate subjects such as authentication, access control, and cross-site scripting, and how the cheat sheets complement the OWASP Proactive Controls. Jim also discusses maintenance, drafts, and the challenge of keeping recommendations accurate as technology changes. Alongside a look at his other OWASP work, he invites listeners to review, improve, or finish a resource rather than wait for somebody else to do it.The Application Security Podcast is brought to you by Security Journey.About Security JourneySecurity Journey provides application security education for developers and everyone in the software development lifecycle.→ Learn more about Security JourneyConnect with Jim Manico:→ Jim Manico — Manicode SecurityMentioned in this episode:→ OWASP Cheat Sheet Series→ OWASP Proactive Controls→ OWASP Java EncoderFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Practical security guidance with Jim Manico01:54 Jim’s work across OWASP projects07:08 Open-source projects are a team effort08:18 What the Cheat Sheet Series provides09:37 How the project started11:16 Recruiting contributors and choosing topics13:28 Keeping security recommendations current15:50 How developers can use the cheat sheets19:19 Understanding draft and beta guidance21:43 Finding a useful way to contribute23:55 The roadmap for new cheat sheets26:40 A call to help improve OWASP guidance