Jeff Williams
More info
- Known for
- OWASP Top 10
- Company
- Aspect Security, Contrast Security
American application-security figure who wrote the first OWASP Top 10 and chaired OWASP for years.
Mark Curphey founded OWASP in 2001, but it was Williams who in 2003 put together the list that would become the project's public face: ten classes of web application vulnerability, from injection to broken authentication. It was meant to raise awareness and ended up as a procurement checklist worldwide — not quite the intent, as Williams himself has pointed out.
He founded the consultancy Aspect Security and, in 2014, Contrast Security, which instruments the application from the inside at runtime instead of scanning source code (SAST) or attacking it from outside (DAST).