Free Engineering Workbench calculator — live below, no login
Application security verification coverage
Track how much of the OWASP ASVS (or Top 10) checklist an application has verified and passed.
Cybersecurity & cyber assuranceHow it's worked out
- Pass rate = passed ÷ (passed + failed). Coverage = (passed + failed) ÷ (in scope − not applicable)
- Requirements counted from one ASVS version
NoteCoverage tells you how much you know; pass rate tells you how good it is. Report both, or a high pass rate on little coverage will mislead.
Source: OWASP Application Security Verification Standard (ASVS) 4.0.3 / 5.0
Need help acting on this number?
VVnT SeQuor's Cybersecurity & Cyber Assurance practice helps teams turn this metric into a plan.