Open Web Application Security Project

Overview
The Open Web Application Security Project (OWASP) is the leading source of information, guidance and tools on web application security.