OWASP Risk Rating Methodology on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.