Trust center · Security
OWASP Application Security Verification Standard
The OWASP ASVS is an open standard from the OWASP Foundation that lists the security requirements a web application should meet — authentication, session management, access control, input handling, cryptography, logging and more — across three levels of assurance.
- Published by:
- OWASP Foundation
- Official source
- Official source
Why it matters to your dealership
Most breaches start in the application itself. ASVS is the developer’s checklist for closing those doors before they’re found.
Our status
Dealer Suite 360 uses OWASP ASVS as its application security checklist. We have not had an independent ASVS verification.
How Dealer Suite 360 applies it
- Authentication: 12+ character passwords checked against breach lists, two-factor with recovery codes, single-use expiring codes.
- Sessions: secure, HttpOnly, signed cookies; sessions revoked on sign-out, password change and 2FA changes.
- Access control: every request is checked server-side against the user’s role and dealership.
- Abuse protection: rate limits on sign-in, codes, password reset and account requests.
- Security headers and HTTPS everywhere (including HSTS).
- Webhooks and system-to-system calls are signature-verified.
Dealer Suite 360 is designed and operated in alignment with these frameworks. Alignment does not imply formal certification.
