Which project focuses purely on web application testing?

• A. Open Source Security Testing Methodology Manual (OSSTMM)
• B. Web Application Security Testing Guide
• C. CIS Critical Security Controls
• D. Open Web Application Security Project (OWASP)

Answer: (D)

Open Web Application Security Project is devoted to web application security testing. It’s a community-driven effort whose entire focus is improving how we test and secure web apps, producing resources specifically for web applications. That single, web-focused scope makes it the best fit for a project purely about web application testing. The other options address broader security testing (a general methodology) or general controls, and the Web Application Security Testing Guide is a detailed resource within that broader web-focused effort rather than a standalone project.