Mark Curphey
More info
- Known for
- Founding OWASP (2001), SourceClear
British security figure who founded OWASP in 2001, back when web application security was barely a discipline of its own.
OWASP began as a mailing list and an open document about how web applications actually break. It grew into a non-profit with guides, tools and the Top 10 list now quoted in procurement documents by people who have never read it. Keeping the material free was the whole point: knowing about SQL injection and XSS shouldn't sit behind a consultancy invoice.
He later worked at Microsoft and founded SourceClear, which scanned open-source dependencies for known vulnerabilities before that activity had a three-letter acronym.