What's Changed

OWASP Mobile App Security Checklists

The highly anticipated OWASP Mobile App Security Checklists are back including very exciting news.

New Features of the MASVS Checklists

• Completely automated: generated from scratch using openpyxl.
• Multi-language: now available in all 13 MASVS languages.
• Always up-to-date: from now on released with every new MSTG version & always using the latest MASVS.
• New clean design: consistent with our new identity.
• Simpler structure: all MASVS categories in one sheet.
• Traceable: include exact MASVS and MSTG versions and commit IDs.

Using the Checklists

• Use the "Status" column to:
  • Discard controls by selecting N/A
  • Set the result of a test by selecting Pass or Fail.
• Add more columns or sheets as you wish or need. For instance:
  • Duplicate & rename sheet to test for different platforms.
  • Simply copy & paste the "Status" column to cover additional platforms (rename title accordingly).

Feedback

Your feedback is essential for the development of the project. If you have any comments or new ideas please post them here:

https://github.com/OWASP/owasp-mstg/discussions/new?category=ideas

Other Changes

• Update README.md by @sushi2k in #2018
• Upgrade NowSecure to God Mode donator by @cpholguera in #2021
• Fixed link by @Brasco in #2032
• Automated Checklist and YAML Generation by @cpholguera in #2010

New Contributors

• @corielynch made their first contribution in #2029
• @Brasco made their first contribution in #2032

Full Changelog: v1.3.0...v1.4.0