OWASP, Top 10, ASVS, SAMM, API Security: Use when reviewing web, API, service or application security for defensive findings and remediations.