2020-Member-Survey

2020 OWASP Member Survey
How would you rate your overall satisfaction with OWASP?

Count

Pct

5 - Very Satisified

73

27.7%

4 - Mostly Satisfied

121

45.8%

3 - Neutral

53

20.1%

2 - Mostly Negative

10

3.8%

1 - Very Negative

4

1.5%

No Opinion

3

1.1%

Total
How involved are you in OWASP activities?

264

3.95

Count

Pct

5 - Very Involved

44

16.9%

4 - Somewhat Involved

59

22.6%

3 - Occassionally Involved

71

27.2%

2 - Rarely Involved

59

22.6%

1 - Never Involved

28

10.7%

Total
What OWASP activities do you find most valuable? (Select all that apply)

261
Pct

Networking with others

158

59.8%

Local Chapter Meetings

164

62.1%

Global Conferences

87

33.0%

Regional & Local Events

98

37.1%

Monthly Newsletter

61

23.1%

OWASP Projects

186

70.5%

Training Events

74

28.0%

Count

Pct

30

11.4%

Less than 2 projects

59

22.3%

Between 5 and 10 projects

137

51.9%

More than 10 projects

38

14.4%

I have never downloaded or used a Project

Total
If you have downloaded Projects, how useful were they for you?

Score
3.5

Count

How often have you downloaded OWASP Projects?

Score

264
Count

Pct

5 - Very useful

89

39.9%

4 - Mostly useful

102

45.7%

3 - Hit and miss

30

13.5%

2 - Mostly not useful

0

0.0%

1 - Not useful

2

0.9%

Did not answer

41

Score

223

4.24

Total

1

2020-Member-Survey

What activities are you involved with on a regular basis? (Select all that apply)

Count

Pct

Training Events

38

14.4%

Events and Meetings

125

47.3%

Project Leadership

28

10.6%

Conferences

91

34.5%

Chapter Leadership

43

16.3%

Projects

56

21.2%

Since you’ve joined, how has the value of being part of the community changed?

Count

Pct

5 - Much better value

28

10.6%

4 - Mostly better value

64

24.2%

3 - About the same

146

55.1%

2 - Less value than before

18

6.8%

1 - Must less valuable than before

6

2.3%

Did not Answer

3

1.1%

Total

265

Do you plan to renew your membership when it’s next due?

3.34

Count

Pct

Definitely will renew

112

46.5%

Most likely will renew

66

27.4%

Unsure27

11.2%

Will likely not renew

10

4.1%

Will definitately not renew

4

1.7%

Not Applicable, I'm a Lifetime Member

22

9.1%

Did not answer

24
Total

In your job, what is your typical security role?

241
Count

Pct

Breaker44

16.6%

Builder

127

47.9%

94

35.5%

DefenderTotal
How long have you been involved in OWASP?

265
Count

Pct

Just over the past year

48

18.1%

Between one and three years

63

23.8%

Between three and five years

64

24.2%

Between five and ten years

61

23.0%

More than ten years

29

10.9%

Total

Score

265

2

2020-Member-Survey

How long have you been a paid member of OWASP?

Count

Pct

Joined over the past year

74

30.1%

Between one and three years ago

75

30.5%

Between three and five years ago

49

19.9%

More than five years ago

45

18.3%

I am not a member

3

1.2%

Did not answer

19
Total

I currently hold an OWASP Leadership role (Chapter, Project or other)

246

Count

Pct

Yes

50

18.9%

No

215

81.1%

3

2020-Member-Survey

How would you rate your overallsatisfaction with OWASP?

What factors most led to your rating above?

1 - Very Negative

Everything you do is broken. Your web site is a constant downward spiral. Your email
management lends itself to spamming. You treat members poorly. Total lack of aneffective member portal.

1 - Very Negative

this survey

1 - Very Negative

No idea what I got... I paid and got access to nothing. Spoke to no one, neither been
spoken to.

2 - Mostly Negative

Slow communication and poor community

2 - Mostly Negative

Members are not viewed any differently then people who attend meetings when it comesto input on any operational or financial strategic decisions by the board and foundation.
Lack of consistency, standards, and professional communication.
Board bylaws and resolutions seem to have been compromised to make things lesscontroversial and cater to minority of complainers to quiet them.
If the board members need to be members the chapter and project leaders should also
be required to be members. The board members put in as much if not more work andmembership is a requirement.
Requiring the paid membership I believe will weed out the less serious and dedicatedleaders.

2 - Mostly Negative

The new donation restrictions.

2 - Mostly Negative

Poor project quality.
Some Flagship projects have not been updated in years but are still considered flagship.
Many on the Global board do not appear to be experienced which makes the organisation
look amateur.

2 - Mostly Negative

Foundation has shifted to focus on Foundation revenue while leaving Chapters andmembers wondering about future of non-Foundation focuses. Projects and summits getsome attention, but chapters and locally run conferences are not given much support.

2 - Mostly Negative

Poor leadership2 - Mostly Negative

I love OWASP. However, I feel the inaction in regard to handling abuse and enforcing
basic decency requirements (as outlined in the bylaws) in community forums, like theleaders' list, has seriously degraded the organization. What the org has tolerated on theleader's list has ruined OWASP for me. This issue goes beyond the leader's lists andincludes how some community members have been allowed to treat the Board and other
OWASP volunteers.

2 - Mostly Negative

Intransparency, centralization, being treated condescendingly, slow/no reactions toinquiries, no working access to tools like Atlassian

3 - Neutral

We have a chapter in Charlotte, NC but it’s not active anymore. I will need to find anotherchapter to be a part of. I’d suggest closing the Charlotte chapter of its no longer active.
We’ve had a few people asking about new meetings but they never come to be.

3 - Neutral

Local chapters are great, at the leaders level (e.g. on the mailing list), it's a lot of
nonsense.

3 - Neutral

I love what OWASP stands for, I like the local meetings, love the top 10 - However yourmembership support - even to login and see if I am still a member is rough. Lots of web
redirects (suspicious) - I signed up for lifetime and now got an email saying to did not resign up. I am checking web site certs blocking scripts etc... and I still am not sure if I sent
my $500 to the right place

3 - Neutral

I haven't yet attended a single OWASP event in South Africa since becoming a member.

3 - Neutral

I haven't got any replied from the dawn yet regarding the owasp student chapter

3 - Neutral

The leader for the Danville group quit and dissolved the group. Now there are no local
meetings anymore.

3 - Neutral

Lack of support from OWASP Global Board

3 - Neutral

No events in APAC and general lack of commitment from the board

3 - Neutral

New York metro activities have quieted down compared to 5 years ago.

3 - Neutral

Technical factors,
In terms of information,
The biggest disadvantage is the lack of security synchronization internationally

3 - Neutral

Goals and intentions are good. Marketing and general public reach-out are minimal tonon-existent, which IMO misses the entire point.

3/21/20201

2020-Member-Survey

3 - Neutral

Self driven communication and lack of much else other than web projects tools (which are
obviously very useful...thank you)

3 - Neutral

Lack of communication. Not sure where the value is beyond certain apps.

3 - Neutral

Expanding attempts to develop the OWASP "brand," rather than focusing on delivering
the best web-security advisory content

3 - Neutral

Not much activities in Singapore despite having a chapter here.

3 - Neutral

Good vision, lack of follow-thru, trying to pease everyone is hard, but sometimes thesolutions do not work out all that well.

3 - Neutral

It is important about chapter supporting and question response.

3 - Neutral

I don't really interact much with OWASP, to be honest. The last time I went looking for a
resource it had been moved to GitHub, then moved off of GitHub to somewhere else,
which then had a landing page that said I should go check GitHub.

3 - Neutral

Many of the people are wonderful and willing to commit their time to helping others.
Overall interacting with the organization itself can be very frustrating and many times it
seems to be out of sync with the members.

3 - Neutral

I haven’t had much interaction with them this year. When events come around in Dublin
tickets go so fast then you find out after that the event wasn’t even full3 - Neutral

Improductive email threads

3 - Neutral

Great project, great people. However, difficult to find relevant and up-to-date information(for instance on website, I hope the new one will fix the issue; members directory not
updated / missing ; local chapters don’t seem to be under control), can’t see benefits ofmembership.

3 - Neutral

Local chapter is attendance, frequency and content is meagre

3 - Neutral

OWASP needs better support to small chapters and local activities.

3 - Neutral

I want more information on future meetings.
Can you speed up the organisation of my local branch in Reading, UK

3 - Neutral

OWASP China is inactive

3 - Neutral

I don't have much interaction with OWASP, but I do use their materials so wanted to join
and make a contribution that way.

3 - Neutral

Connection of management to the field

3 - Neutral

not must engagement opportunity in Singapore

3 - Neutral

i'm neither a breaker nor a builder, as a marketing guy i'm ok with what i'm getting, wish
we had more visionary and business discussions.

3 - Neutral

The mission is good but the organization isn't great. There's a lot of toxicity in thecommunity. I run a chapter and I typically try to stay as far away from the Foundation as
possible. To be clear – the staff are good and mean well, but there's a lot of pointless
bureaucracy and argument that isn't worth my time.

4 - Mostly Satisfied

Good conference

4 - Mostly Satisfied

It doesn't have a lot of money behind it, so it's as good as it can be. However, the is a lotof mess and slop that needs to be purged or cleaned up.

4 - Mostly Satisfied

OWASP projects, reference materials and tools

4 - Mostly Satisfied

good information available, I wish there were more events/local chapter meetings (ormaybe there are but I don't attend)

4 - Mostly Satisfied

I have not had the opportunity to be more involved with OWASP activities in the past.
Although I did attend an event by OWASP in taiwan.

4 - Mostly Satisfied

OWASP events

4 - Mostly Satisfied

I really like the OWASP conferences and large suite of toolings it promotes. However, I
do sometimes worry with the tools that there's too many efforts, and thus it's hard for me
to know whether a tool is mature and actively supported or if it's in a basic development
stage and maybe not yet appropriate for real workloads.

4 - Mostly Satisfied

Projects should be a bit more centralized so that it is easier to participate. Each projectseems to operate differently. This can make it hard to get involved, and allows projects tolapse as they generally come down to one or two leaders instead of a group ofparticipants.

3/21/20202

2020-Member-Survey

4 - Mostly Satisfied

It would be great to see some trainings on the most popular tools used by OWASP
members. For example, with Burp Suite how do you actually create the tests and run
them rather than a demo where everything is already created and set up.

4 - Mostly Satisfied

Primary factor will be community, which i'm finding very open and helpful.
There are still some issues, mainly regarding communication between some entities.

4 - Mostly Satisfied

Great communications and projects.

4 - Mostly Satisfied

Choice of speakers/topics.

4 - Mostly Satisfied

Great resources and community, but finding them can be improved

4 - Mostly Satisfied

OWASP does great work and I'm happy to support the project, but I'm not engaged at all.

4 - Mostly Satisfied

Hyper focus on software and lack of focus on operations. “Dev” “Sec” “Ops” means weneed to understand Ops

4 - Mostly Satisfied

There are a lot of security information organizations all over the world (ISF, (ISC)², EC
Council, ISACA, . . . ) and a better cooperation I believe it would be a great benefit foreverybody.
The new format of the website (no more wiki) in my opinion was a failure.

4 - Mostly Satisfied

The great benefits OWASP provides, both in events as well as project resources.

4 - Mostly Satisfied

The work and mission OWASP does is important, but I am missing a general level ofprofessionalism. Projects are often of low quality and unmaintained. There is a lot ofdifferent ideas, but often a lack of focus. Conferences are good, but not great. AppSec
Global DC was good, but some talks could be better, as well as the venue

4 - Mostly Satisfied

Good initiative

4 - Mostly Satisfied

ASVS and OWASP Top 10

4 - Mostly Satisfied

I do not have enough clarity of events. I would also like to see more on certifications that I
can recommend for my team

4 - Mostly Satisfied

Focusing on security as a facet instead of step.

4 - Mostly SatisfiedЕсли правильно понимаю то вы Партнер Microsoft по безопасности и можете мнепомочь протестировать веб сайты и услуги МФО Украины ( Онлайн кредиты имикрозаймы)4 - Mostly Satisfied

Abundance of material, tools that help with application security approach.

4 - Mostly Satisfied

I am satisfied with the overal content and mission of OWASP. I am a little disappointed in
our local Las Vegas chapter however as they haven't booked any events in the last 6-8
months. The community should be gathering on a more regular, at least monthly basis.

4 - Mostly Satisfied

Once in a while, I get a colored newsletter

4 - Mostly Satisfied

God community in Germany, (mostly) responsive staff when using ticket system

4 - Mostly Satisfied

cheat sheets and other content are great as well as affordable events and vendor
neutralness

4 - Mostly Satisfied

Good and more important independent information provided on computer security.

4 - Mostly Satisfied

Because seems the engagement is low from OWASP side, no way to contact them

4 - Mostly Satisfied

OWASP seems to be slowly improving over time, though the pace of chance isn't as fastas I'd like.

4 - Mostly Satisfied

I believe there is a lack of vendor neutral training and presentations in the global
conferences on how to build security into software products from the start as a Security
Program, treating security as a natural extension of quality using similar approaches,
metrics, and cooperative testing frameworks/processes. All security bugs are quality
bugs. Too often development organizations treat the two concepts as totally independent
efforts, if they even have formalized both efforts. Many companies focus on "pentesting
as security" (or security validation after the fact) with detected issue fixes added into later
releases. And often the burden of security is on the Security Professional who issignificantly outnumbered by developers. Security professionals need to understand how
to build and operate a security program like or even as part of a quality program and justlike quality work to have development staff perform the security/quality work with the
Security Professional focused on measuring and improving program effectiveness.

4 - Mostly Satisfied

Some projects are better run than others. It would be nice if there was an indicator of how
active a project was.

4 - Mostly Satisfied

The work you do is very valuable

3/21/20203

2020-Member-Survey

4 - Mostly Satisfied+ Openness (cc-by licensed docs) , FOSS software, NON commercial driven, real 501
non profit!
- mail groups now Google mail (privacy disaster), too little physical community meetingsin Benulux , (too!) expensive conferences

4 - Mostly Satisfied

I am currently one of the paper/presentation reviewers for OWASP AppSec Dublin 2020
CfP. The only material that is visible is the abstract and the 'detailed' outline. This is
typically around a hundred words. The total absence of any actual representative tangible
material from the proposer makes any informed assessment of the worth of the proposal
almost impossible. The blinding system that is being used is poor and arguably 'not fit for
purpose'. It is also intensely frustrating to be attempting to make value judgements whilst
being faced with an almost total lack of information. I am very upset that OWASP hassuch a poor system for assessing proposals for conference papers and presentations,and it colours my attitude to OWASP as a whole. It is all very disappointing.

4 - Mostly Satisfied

Public information seems to be somewhat weak. So called, "System Security Experts"
show up tv, on but there is seldom follow up from our membership when a major security
leak is discussed. Why? Experian for example, is still in the cleanup mode after one of thelargest breaches in "credit history", but where is the official response from OWASP? I
believe OWASP needs a more out front response team and image to the public as thefirst line of defense in system security.

4 - Mostly Satisfied

Had a great time at the conference in Amsterdam en enjoyed several of the flagshipprojects.

4 - Mostly Satisfied

OWASP provides very valuable resources for me.
Now even better looking with the new website... ;)4 - Mostly Satisfied

the projects

4 - Mostly Satisfied

The level of overall member engagement seems to have gone up.

4 - Mostly Satisfied

The AppSec conferences

4 - Mostly Satisfied

The documentation and resources are great

4 - Mostly Satisfied

More local meetings in NL

4 - Mostly Satisfied

OWASP meetup organize speakers over food4 - Mostly Satisfied

Great organization

4 - Mostly Satisfied

Great community and offerings.

4 - Mostly Satisfied

I want to get involved..

4 - Mostly Satisfied

Community involvement

4 - Mostly Satisfied

Lack of Conferences in close area.

4 - Mostly Satisfied

Information available excellent, research excellent and opportunities to collaborate
excellent

4 - Mostly Satisfied

It's an international organization and I've been able to attend at least one local activity.

4 - Mostly Satisfied

awareness on security vulnerabilities

4 - Mostly Satisfied

I'm less less time on OWASP recently. OWASP is great, especially chapter meetings andconferences. Many extremely good projects are incepted under the flag of OWASP. On
the other hand, a lot of great security opensource tools and initiatives have nothing to dowith OWASP. AppSec niche has grown and is less dominated with OWASP compared to
10 yrs ago.

4 - Mostly Satisfied* Latest board voting process was somewhat obscure. I never received the link for voting(I know I was in a grey area situation), but communication wasn't good at all in theprocess.
=> We still have a very good problem around communication. I see the efforts on gettingthat better, and to be honest I hope they succeed.
For sure, and the most important part that I've saw is the willing to change. I respect that,and I hope we get to better standards.

5 - Very Satisified

Success of OWASP Top Ten, and the high quality of the most recent conference inLondon.

5 - Very Satisified

The community's determination to improve security and educate the masses.

5 - Very Satisified

I love the organization, local support and people

5 - Very Satisified

Well done projects, good speeches on the events.

3/21/2020

4

2020-Member-Survey

5 - Very Satisified

AppSec CA

5 - Very Satisified

Quality of materials and community activity

5 - Very Satisified

Comprehensive content and support, very knowledgeable product and content owners
and leading edge in application security space.

5 - Very Satisified

Community effort to ensure all parts if the globe are covered from awareness, workshop,
etc. Treat all equally. Open source projects.

5 - Very Satisified

I really feel that the community is really an awesome starting point for the next generationof security pentesters

5 - Very Satisified

Justin Ferguson - I heard about OWASP and attended one meeting. Justin made me feel
comfortable immediately at the meeting and in subsequent meetings. Additionally, heschedules excellent speakers. Overall, if it were not for him, I would not have actually
paid to join the OWASP.

5 - Very Satisified

Attended appsec cali this year. Great conference.

5 - Very Satisified

Interesting and very relevant to my job

5 - Very Satisified

The great free documentation (ASVS, SAMM, etc.)

5 - Very Satisified

top 10eventsideology

5 - Very Satisified

Interesting meetings, speakers and events that are well organized.

5 - Very Satisified- The networking event allows us to know each other and to meet companies.

5 - Very Satisified

Use ZAP and Top 10. Interested in API Top 10. Enzoyed my first AppSec in DC recently.
My company provides digital services for government agencies using FOSS.
My job is to ensure their security and compliance using FOSS. OWASP tools andcommunity help.

5 - Very Satisified

OWASP Austin is pretty active and the core members are great.
The happy hours, the chapter meetings, the lunch and learns, and LASCON are a lot offun.

5 - Very Satisified

great research and projects

5 - Very Satisified

The most current informations and practicies

5 - Very Satisified

Good project and good publications

5 - Very Satisified

education, information and networking

5 - Very Satisified

Good visibility of Owasp top 10
Active chapter
Good colleagues
Good appsec in dc or ny

5 - Very Satisified

I believe in the mission and use the research daily.

5 - Very Satisified

Valuable mission and process

5 - Very Satisified

Good people are trying to do the right thing

5 - Very Satisified

Great meetups with good speakers

5 - Very Satisified

Openness

5 - Very Satisified

the wealth of information available; the community ethos

5 - Very Satisified

Great tools and community

5 - Very Satisified

great resources and people

5 - Very Satisified

Such a highly active organization. So many of the projects are recognized as leaders intheir respective areas (ZAP, Top Ten, etc.)

5 - Very Satisified

No complaints

5 - Very Satisified

The professionalism and kindness of the people in my two local Chapters - the Los
Angeles County and Orange County clubs.

5 - Very Satisified

Services offered and community

5 - Very Satisified

Very helpful projects

5 - Very Satisified

The ability to communicate with network professionals.

5 - Very Satisified

Good local events and also AppSec is great

3/21/20205

2020-Member-Survey

2020 OWASP Member Survey
What would you like to see added as an additional benefit for OWASP members?
More local trainings, they are great and are also useful for networking.
Continued training and interacting.
I just need to find more time to get locally involved, as I believe that would be beneficial.
Computer Project Leaders need to see computer and systems security as a first consideration in new project development. Toooften new systems are rushed to market on tight budgets and tight time constraints and security is the last check off item. For
example, the recent election problems with a "last minute" voting app being thrown at the public with little or no testing and ,most
likely poor security checks, if any. I give a presentation on "Starting a Computer Project Out Right from the Start". Where all the
security issues are designed in at the front before the first line of computer coding is written. This technique is used at NASA andadapted by myself and others. OWASP needs to conduct a training program of design and development that makes computer
security up front and not an after thought in the end.
Note: Last year I became a Lifetime Member, so some of the answers didn't quite fit.
A refreshed board structure and project structure. Less commercial aspect to global conferences, cheaper tickets. The Owasp ofJeff Williams, Tom Brennan, Eoin Keary & Seba was much better, more effective and easier to engage with.
Training with discounts for members
Training discounts and then those training discounts linked to affiliated security certifications or cooperation
Discounts to events in other countries does nothing for me. I think inviting and getting more information to new members on how
they can be involved would have helped.
Cloud based cheat sheet or add cloud stuff on testing guide.
I am a Japanese member.
I think localization is essential.
I want to contribute in this direction this year.
More communication on the projects, meetings and opportunities to collaborate with encouragement from the seasoned experts
Maybe discount of various trainings and certificates.
discounted exam/prep courses for CISSP, CEH, OSCP etc. certifications.
Closed forum for sharing knowlegde. Maybe more active in sharing other conferences nearby
more professional sast and dast products.
security concept blueprints.
Nothing, all good.
Discounted trainings and events for OWASP members
I would be interested in leading the local OWASP chapter, but there is technically already one and I would want to see if there is
an official way that I can take leadership of it.
Thank you!
Stop the idiotic surveys.
It'd be nice that project leaders don't have to pay a member fee and if OWASP would take care of the costs of some events suchas the OWASP summit.
Webinars, educational opportunities, maybe a job board
To be honest, the slack channel invites are a mess. The invite links expire and people wanting to join the community can't join.
There is very little value to my membership since my local chapter is defunct. I still paid for the lifetime membership though.
This is a little out of scope for this question but I would like to see a chapter close to Boise Idaho.
Can’t think of anything- A Welcome guide (a flyer) on the local chapter: what do we do, what you can do, how to enjoy ourselves.
I would like to have a local chapter meeting on how to maximize our membership. For example, explain about the OWASP
projects more. I am a software engineer. But am very curious about security. I know there are others that do not have a job insecurity but are in a technical role and go to the meetings because they want to learn. I just think learning more about how we,those who do not do security professionally and may lack the experience, can actually learn more security and actually start tocontribute to OWASP as well. I know I would love to.
All members should get a shirt with printed with the OWASP logo.
I would like to be more involved in the community but I don’t know. I wanted to organize local meetup but I don’t know OWASP
can have my back on this1

2020-Member-Survey

A member portal with a 'Delete my account and all my information' option.
If we as the member can get a snapshot of some highlight from the OWASP conference not held locally that’s would be great.
Snapshot of highlight not just the overview, but maybe like a recording or PowerPoint presentation from the lecture or training. It
can just be one from the event.
priority access to local meet-ups. Many times the places fill up with non-members before you have chance to sign up :(I would like to see more events in the netherlands
Evaluation and or constructive criticism of the Certification Circus.
more training, entry level skill building. apprenticeship opportunities
Regular webcast for the projects
Non-OWASP conference discounts. Publisher discounts.
Better communications and processes. I open tickets and write emails that are left unaswered.
Can't think of anything extra.
Copies of presentations given at conferences on the web site of OWASP for members.
Presentation templates for OWASP Top10 measures to take in an organization to be used by members.
Not sure new benefits are needed : better make sure existing benefits are available to all members throughout the world
Get book discountEngage w/ members over meetings - host good speakers, networking, project collaboration and so forth
Project involvement
opening new chapters
I love the central community initiatives but in my city (Montreal, Canada) there doesn't seem to be much going on on the local
level. There seems to be some kind of group with people advertising they are on the board of a local chapter but perhaps i'm notin with the right mailing lists to see the value locally. When I was at DEFCON I met so many OWASP folks and interacted on
wonderful conversations, it's what made me decide to join. Unfortunately, this has not translated to the local level.
Just a comment on the "security role" question: I see my self in all categories, and I think that is very common for solo security
employees in companies, where you have to do everything.

Maybe an education pathway, so long as it is not too expensive to participate.
I would like to see the conference go back to recording and making available the presentations from events. I'm fine if there's an
initial release to members followed by a later release to the general public just as long as the conference talks are recorded andavailable to watch in future.
swag maybe or a huge poster of the OWASP Top 10 2020
I’m not familiar with the different benefits.
Keep it up.
Networking even beside from official OWASP events brings a lot of benefit e.g. from my point of view the model of the German
Chapter "Stammtisch Munich" is a success and may be adapted to other locations too. That's what we are trying at the moment.
respectMore meaningful engagements with OWASP members, and linking with local security associations. OWASP chapters should stop
being silos. No OWASP swag are available over here as well (Singapore). Lifetime members are not honoured either, just being astatistic. OWASP has meaningful projects, and deserves more publicity, especially in APAC regions.
Less centralization, more federation, more power to the chapters and projects. HQ is a bottleneck.
Bigger conferences discounts
I find going to meetings in London quite difficult and not that welcoming when I get there. I would quite like to start a southcoats/Sussex group, but I suspect there aren't enough of us to get it going. So - maybe an indication of where others live might beuseful to gauge numbers.
Members don't really get much benefit. I think we should revisit if we even want to do memberships. I like how the EFF structures
their payments. It's clear, I'm donating and I'm donating to a good cause. Maybe we should sell more the good work we do andless "membership" benefits.

More local events/meetingsМне просто нужна поддержка в этом обществе которое не понимает куда мы движемся, и обманывают друг друга. Строятв городе Coworking centr IT HUB и даже не знают что с этим делать и просят закрыть сайт который я создал заплатил,пытался привлечь клиентов, потому что это такое место является фундаментальным для будущего. Если Вы поможетемне заработать денег, так как без них тебя не воспринимает общество, то я смогу что то сделать в этой локации. Спасибо

2

2020-Member-Survey

Please update the new web version with the materials from the old one. There is a lot of things that are missing...
I have not fully scrutinised OWASP's resources like I have PMI so I am not in a position to criticise nor offer advise just yet. It
would be unfair and baseless.
All good
OWASP Training for Projects and Tools
More content for OPs
Since joining OWASP, I’ve had no contact with or from anyone in the community. I joined the local chapter mailing list, and havenever had a single email from them. It’s a complete waste of time and money.
More presentations that provide information to young developers on where on the internet to get information that will assist themin their jobs.
none! We should NOT make a difference between members and non-members. Be inclusive for everyone!
If OWASP feels good, I and hopefully other will donate (be a paid member).
Extra content.
Partnerships and critical and objective information about vendors and their solutions, and where they fit in the security stack andindustry, and perhaps discounts or member access to exclusive POC and trail capabilities to this curated audience.
After reviewing and studying many solutions and projects of OWASP , Newly I applied for membership. Thanks to God I am
currently the network security manager of the largest computer company in Iran. And if desired, good cooperation can be made in
the areas of education, technical projects, and conferences to enhance security knowledge and make security internationally inthe world. I also have a lot of ideas for holding conferences, presenting scientific papers and undertaking representation in Iran,and given my work experience, I am also able to raise funds for these programs.
Regards.
More co-sponsorship with other security and architecture groups.
Please fix the renewal process. Give me a button to renew and pay my money. It took a while to figure out how I was supposed
to just "join" as a means of renewing. After I "joined", I got both a "please don't forget to renew" email and a "welcome to
OWASP" email.
There are probably some other benefits that would be cool but they take a back seat to optimizing the renewal process.
Thanks.
More software with the OWASP verified.
Better visibility to local events, I often find out about them after they have occurred.
Ability to buy OWASP gear independently, maybe an online library of OWASP chapter content and presentation videos.
Global conference in Singapore and Asia pacific region
Include volunteering opportunities with OWASP open source projects in the newsletters
It would be cool if we had a certification, so we could ditch the CSSAP which is an annoyance.
The existing benefits are great: access to videos of the conference presentations; and its security projects which I have not taken
advantage of - but I will sometime in the future.
i want join in OWASP-China Chapter Leadership
More training
a slack channel to interact across all the regions
More events focused on building things there is a lot of oofensive people but the prurple and blue feels missrepresented
A tangible membership card would be nice. I got one for CISSP, ACM, IEEE, IET, AES...
For some countries like Turkey, OWASP chapters are very silent and inactive. There should be some activities to boost these
local chapters. Also, countries that are inactive and close geographically may form a regional chapter so that all those local
chapters may work together to improve themselves.
Meetups specific to development- whether that's asking for help on an OWASP specific project or just a project where you'd liketo ask other members for ideas
I'd love to see some small tangible token of thanks for folks that join. Dunno what. Hat or stickers or something? I can think on it.
The community projects add a lot of value. Keep up the great work!
More ideas and ways for developers to improve security skills through security related hackathons, etc
My membership does not get me anything. Not sure if it should, or what that should be. I mainly became a lifetime member tosupport the organization.
Certification programs that don't cost more than college (USA).

3

2020-Member-Survey

I would like to vote on important board resolutions instead of collecting blanket input from anyone. If individuals are not willing tosupport the foundation by joining for $50/$20 then I believe they should not have finally say on decisions. Example: chapter
balances.
That chapter leaders should be voted in every xx years so others may have an opportunity to lead a chapter.
donuts - really good donuts
Better Community management
A better more intuitive website that highlights the activities that are available.
More training, mainly about SAMM
It would be great if CISSPs and other ISC(2) certifications holders attending local chapter meetings and training events had theCPEs submitted to ISC(2) on their behalf.
Active all Chapters which didn't organized after 1-2 events and they are holding Leadership role. Inactivity of more than 6 months
would be cancelled the Leadership role and allot to other member or publicly announce for new Chapter leader on main OWASP
website. Thanks
A clear membership site.

4