Jim Manico -- The #OWASP Cheat Sheet Project

Developers need concrete security answers, but finding trustworthy guidance can take longer than writing the code. Jim Manico explains how the OWASP Cheat Sheet Series turns specialist knowledge into focused, practical references. He describes the project’s origins, the contributors who keep it useful, and how topics move from an idea to reviewed guidance. The conversation explores how developers can navigate subjects such as authentication, access control, and cross-site scripting, and how the cheat sheets complement the OWASP Proactive Controls. Jim also discusses maintenance, drafts, and the challenge of keeping recommendations accurate as technology changes. Alongside a look at his other OWASP work, he invites listeners to review, improve, or finish a resource rather than wait for somebody else to do it.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Jim Manico:
→ Jim Manico — Manicode Security

Mentioned in this episode:
→ OWASP Cheat Sheet Series
→ OWASP Proactive Controls
→ OWASP Java Encoder

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Practical security guidance with Jim Manico
01:54 Jim’s work across OWASP projects
07:08 Open-source projects are a team effort
08:18 What the Cheat Sheet Series provides
09:37 How the project started
11:16 Recruiting contributors and choosing topics
13:28 Keeping security recommendations current
15:50 How developers can use the cheat sheets
19:19 Understanding draft and beta guidance
21:43 Finding a useful way to contribute
23:55 The roadmap for new cheat sheets
26:40 A call to help improve OWASP guidance