masvs

From public sources

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

ApplicationCategory: Mobile Apps · Security & passwordsOpen sourcedata checked Oct 16, 2026

Overview

  • android-app
  • audit
  • gitbook
  • ios-app
  • mastg
  • masvs
  • mobile
  • mstg
  • owasp
  • penetration-testing
  • penetration-tests
  • security

Installation

Commands are shown, never run by the marketplace. Check them against the official documentation.
  • Official websiteFrom public sourcesfrom catalog metadata
    mas.owasp.org/MASVS ↗
  • Build from sourceFrom public sourcesfrom catalog metadata

    Build from source: no validated build recipe — follow the repository instructions.

    github.com/OWASP/masvs ↗

Compatibility

Unknown means no evidence was found — not that the product is incompatible.
PlatformStatusArchitectureEvidenceConfidence
AndroidUnknown———
iOSUnknown———

Releases

checked Oct 30, 2026
v2.1.0LatestJan 18, 2024Official source ↗

Files in 2.1.0

The marketplace does not host these files: downloads go to the official source. Files have not been scanned by us.
FilePlatformSizeSHA-256Download from the official source
OWASP_MASVS.epubother994.4 KB—Official source ↗
OWASP_MASVS.pdfother992.6 KB—Official source ↗
OWASP_MASVS.yamlother22.7 KB—Official source ↗
OWASP_MASVS.cdx.jsonSBOM27.6 KB—Official source ↗

Release history

Quality profile

algorithm quality-v1.0 · assessed Oct 16, 2026
Quality Score80
Risk Score0
Confidence 1.00
Quality Score and Risk Score are different measures. A high score does not guarantee safety.

Score components

Maintenance · 2020
last activity 24 days ago
Documentation · 1515
README 3481 chars, description present
Ready to use · 156
install instructions: no; releases: yes
Metadata · 1010
4/4 of description, homepage, license, topics
Releases · 106
10 release(s), latest 1001 days ago
Category confidence · 105
classifier confidence 0.5
Adoption · 108
2459 stars (log-dampened, 10k = max)
License clarity · 55
SPDX CC-BY-SA-4.0
Community · 55
issues enabled, 754 forks

License

CC-BY-SA-4.0
Known licensefrom the repository host

This is the catalog policy status, not legal advice.

Sources

github.com/OWASP/masvsPrimary★ 2,459 starslast activity Sep 21, 2026Primary repository · Confidence 1.00

Reviews

Sign in to write a review

No reviews yet.

Alternatives

README

From OWASP/masvs · license CC-BY-SA-4.0 · fetched Oct 30, 2026

OWASP Mobile Application Security Verification Standard (MASVS)

[OWASP Flagship] [Creative Commons License]

[MASVS Build] [Markdown Linter] [URL Checker]

The OWASP Mobile Application Security Verification Standard (MASVS) establishes baseline security and privacy requirements for mobile apps that are broken down in the the OWASP Mobile Security Weakness Enumeration (MASWE) and tested in the OWASP Mobile Application Security Testing Guide. You can use it:

  • As a metric - To provide a security standard against which existing mobile apps can be compared by developers and application owners.
  • As guidance - To provide guidance during all phases of mobile app development and testing.
  • During procurement - To provide a baseline for mobile app security verification.

OWASP MAS: OWASP MASVS ➡ OWASP MASWE ➡ OWASP MASTG

Trusted by

The OWASP MASVS, MASWE and MASTG are trusted by the following platform providers and standardization, governmental and educational institutions. Learn more.

🥇 MAS Advocates

MAS Advocates are industry adopters of the OWASP MASVS, MASWE and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. Learn more.

Open the repository ↗