OWASP ESAPI for Java: Strong, Simple Security Controls for Java Developers

IMPORTANT NOTE: The source code for ESASPI for Java has been moved to GitHub. You may find the ESAPI GitHub source on at ESAPI 2.x on GitHub. For the moment, the open issues will continue to reside here at Google Code, however they will be eventually migrated to GitHub as well. Please do not continue committing changes to Google Code. Please contact Chris Schmidt if you need further details.

OWASP ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers to retrofit security into existing applications. ESAPI for Java also serves as a solid foundation for new development.

For more information, please visit our Wiki.

You can view the latest version of our Javadocs here.

You can see the status of what we are working on for the next release here.

View Contributed ESAPI Components

Realtime Support available on our IRC Channel:

Server: irc.freenode.net

Channel: #esapi

Webchat http://webchat.freenode.net/

Other language versions:

Statistics (Provided By Ohloh)