#027 · Security ProfessionalsEpicLocked in

Mark Curphey

Founder of OWASP

Starting the open project that appsec organised itself around

Rating

87Impact score
Technical depth84
Defensive craft92
Research80
Influence93
FromUK / USA
Era2001–present

Domains

Application securityOpen standardsSupply chain

Scouting report

Started the Open Web Application Security Project in September 2001 as a mailing list and a few documents, and it became the vendor-neutral body that produced the Top Ten, the ASVS, ZAP and the testing guides that appsec teams still work from. Later founded SourceClear on software composition analysis and has kept publicly pushing OWASP to stay relevant to modern supply-chain risk.

Curator’s note

Built the commons the whole application security industry now cites.

Portrait

Painted from a photograph of Mark Curphey by Mark Curphey, supplied by the subject.

Sources