Project Summary
OWASP ESAPI for Java: Strong, Simple Security Controls for Java Developers
Don’t write your own security controls! Reinventing the wheel when it comes to developing security controls for every web application or web service leads to wasted time and massive security holes. The OWASP Enterprise Security API (ESAPI) Toolkits help software developers guard against security‐related design and implementation flaws.
For more information, please visit our Wiki.
You can view the latest version of our Javadocs here.
You can see the status of what we are working on for the next release here.
Other language versions:
PHP .NET Python Classic ASP Cold Fusion Haskell
In a Nutshell, owasp-esapi-java...
- ...
- ...
-
...
has a well established, mature codebase
maintained by a large development team
with increasing Y-O-Y commits -
...
took an estimated 10 years of effort (COCOMO model)
starting with its first commit in January, 2008
ending with its most recent commit 14 days ago
Quick Reference
BSD 4-clause (University of California-Specific)
Permitted
Commercial Use
Modify
Distribute
Place Warranty
Forbidden
Hold Liable
Use Trademarks
Required
Include Copyright
Include License
These details are provided for information only. No information here is legal advice and should not be used as such.
Project Security
Vulnerabilities per Version ( last 10 releases )
There are no reported vulnerabilities
Project Vulnerability Report
Security Confidence Index
Vulnerability Exposure Index
Did You Know...
-
...
in 2016, 47% of companies did not have formal process in place to track OS code
-
...
you can embed statistics from Open Hub on your site
-
...
use of OSS increased in 65% of companies in 2016
-
...
you can subscribe to e-mail newsletters to receive update from the Open Hub blog
30 Day SummaryJun 15 2025 — Jul 15 2025
|
12 Month SummaryJul 15 2024 — Jul 15 2025
|
