hackingDNAreference

← OWASP projects

OWASP CycloneDX

standardflagship

Full-stack Bill of Materials (BOM) standard for software supply chain risk reduction.

Watch tutorials Official site

Bug bounty context

Relevant when programs include supply-chain or dependency scope.

Related projects

OWASP ASVS
Application Security Verification Standard — detailed security requirements and verification levels.
→
OWASP SAMM
Software Assurance Maturity Model for measuring and improving org AppSec posture.
→