The OWASP Testing Guide was developed to help people understand the what, why, when, where, and how of testing web applications. The Guide has delivered a complete testing framework, not merely a simple checklist or prescription of issues that should be addressed. Readers can use this framework as a template to build their own testing programs or to qualify other peopleÕs processes. The Testing Guide describes in detail both the general testing framework and the techniques required to implement the framework in practice.