Andrew Van Der Stock
Executive Director at OWASP Foundation
Geelong, Victoria, Australia
Summary
🤩
RockstarAndrew Van Der Stock is an executive leader and web application security authority with over 25 years in IT and 18 years of focused experience driving application security standards and programs. As Executive Director of the OWASP Foundation he is steering a global transition to virtual training, diversified funding, and broader inclusion while co-leading flagship projects like the OWASP Top 10 and ASVS. He has repeatedly led major standards releases—helping reboot the Top 10 (2017) and co-author multiple ASVS versions, including the 4.0 refactor and markdown-driven documentation improvements on GitHub. Previously he has built and led technical security teams across consulting and industry (Synopsys, KPMG, Threat Intelligence) to deliver secure-by-design architectures, secure code review programs, and managed testing services. An Australian ex‑pat now based in the USA, Andrew pairs deep technical authorship with organizational governance experience and a knack for translating complex standards into practical, testable guidance. Outside of work he’s a fan of Go, cats and spacefaring simulations—hints of a methodical, curiosity-driven problem solver.
18 years of coding experience
26 years of employment as a software developer
Stackoverflow
21reputation
516reached
2answers
0questions
Github Skills (11)
security10
markdown10
owasp10
markdown-it10
documentation10
technical-writing10
github9
xslt7
java6
xss6
esapi6
Programming languages (16)
Github contributions (5)
OWASP/Top10
Sep 2017 - Nov 2021
Official OWASP Top 10 Document Repository
Role in this project:
Technical Writer & Security Advocate
Technical Writer & Security AdvocateContributions:9 reviews, 322 commits, 45 PRs in 4 years 2 months
Contributions summary:Andrew contributed to the OWASP Top 10 2017 project by updating the content for the final release. This involved refining the wording, reviewing diagrams and tables, and ensuring links and CWE references were accurate and high-quality. The user focused on improvements to the release notes, the description of risks, and guidance for various user groups, such as developers and application managers, within the final Golden Master.
securitydocument-repositoryowasp-topowaspowasp-top-10
OWASP/ASVS
Nov 2014 - Aug 2020
Application Security Verification Standard
Role in this project:Technical Writer / Security Engineer
Technical Writer / Security EngineerContributions:1 release, 293 commits, 57 PRs in 5 years 9 months
Contributions summary:Andrew appears to be involved in updating and refactoring the OWASP ASVS documentation. Their contributions include converting the documentation to a markdown format and making updates to reflect ASVS version 4.0. They also made changes to the document generation scripts, removing PDF and HTML generation and cleaning up the repository. This suggests a focus on improving the documentation and potentially aligning it with the latest security standards.
application-securitysecuritysecurity-testingintegritymethodology
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.