Application Security Verification Standard
The OWASP ASVS is a checklist-style standard of security requirements for designing, building, and verifying web applications, organized into levels of increasing rigor. Teams use it to write security requirements up front and auditors use it to verify finished applications consistently. It turns vague goals like "make it secure" into concrete, testable controls.