1 of 27

OWASP Foundation

Board Summary

October 2022

OWASP FOUNDATION

2 of 27

Initiatives & Operations

Andrew van der Stock

OWASP Foundation Staff

OWASP FOUNDATION

3 of 27

Initiatives

New branding initiative underway to match YourMembership

  • Brand Guide
  • Slides
  • Revised logo (slightly changed font)

Bylaws - finishing up and vote to be undertaken

Updated Related Draft Policies (for when the bylaws are passed)

OWASP FOUNDATION

owasp.org

4 of 27

Operations

  • Staff Summit has been scheduled for March 6-9, 2023 in Florida
  • Voting is open for the Global Board of Directors’ election
  • All staff have received their credit cards. We will cancel the AMEX cards once we have transferred all accounts over.

OWASP FOUNDATION

owasp.org

5 of 27

Finance

Tom Pappas

Andrew van der Stock

OWASP FOUNDATION

6 of 27

Non Profit Donor Profiles

Charity Navigator

Guidestar

Will work with Virtual Inc on manually entering 2020 and 2021 data → Gold

OWASP FOUNDATION

owasp.org

7 of 27

Monthly Net Income

Expenses are being managed, income is up

Budgeted $187.7k net profit

Actual $233k net profit

OWASP FOUNDATION

owasp.org

8 of 27

Cash Assets

Balance increased by $131k last month

July 22 $ 1,811,521

June 22 $ 1,688,990

Balance increased by $626k YoY

July 22 $ 1,811,521

July 21 $ 1,192,124

OWASP FOUNDATION

owasp.org

9 of 27

YTD Net Income

Budgeted YTD Net Profit was ($52k) loss

YTD Net Profit is $119k profit

We are doing well: $171k better than budget

OWASP FOUNDATION

owasp.org

10 of 27

Accounts receivable

July AR: $209k

10.34% of total assets (down from 13.1%)

9% over 90 days

Bad debt provision untouched

OWASP FOUNDATION

owasp.org

11 of 27

Operating Reserves

Healthy and increasing operating reserves

FY 22 Operating Expenses (run rate) $121,000 per month

NB: Narrative has a different Op Reserve figure based upon GAAP.

OWASP FOUNDATION

owasp.org

12 of 27

Membership and Chapters

Lisa Jones

OWASP FOUNDATION

13 of 27

Individual Members

Changed methodology to use Stripe (most accurate source of “truth”)

6138 members

One Year 3904

Two Year 1222

Lifetime 923

Complimentary 89

21.48% YoY growth rate (up slightly)

713 to reach stretch goal of 7000

(~ 237 pcm)

OWASP FOUNDATION

owasp.org

14 of 27

Individual Members

Changed methodology to use Stripe (most accurate source of “truth”)

6138 members

One Year 3904

Two Year 1222

Lifetime 923

Complimentary 89

21.48% YoY growth rate (up slightly)

713 to reach stretch goal of 7000

(~ 237 pcm)

OWASP FOUNDATION

owasp.org

15 of 27

Chapters

4 Chapters

In the last 60 days:

  • 6 New Chapters
  • 21 Chapters updated
  • 174 Inactive chapters
  • 3 Chapters not created

Meetup

  • 111k participants
  • 332 events in last 90 days (included the Foundation event posted to all chapters.)
  • 5,858 RSVPs in last 90 days

New Chapters

OWASP Frankfurt

OWASP Kigali

OWASP Uttaranchal School of Computing Science

OWASP Curitiba

OWASP Nagercoil

OWASP Sorocaba

OWASP FOUNDATION

owasp.org

16 of 27

Projects and Grants

Harold Blankenship

OWASP FOUNDATION

17 of 27

Projects

Project status always available at https://owasp.org/projects/status/

Project Summit planned to coincide with Global AppSec San Francisco; taking applications

Project audit report generated; feedback from Project Committee processed; formally kick off audit process 10/26/2022

OWASP FOUNDATION

owasp.org

18 of 27

Grants

Grant org

Grantee

Amount

Status

Google

Josh Grossman (ASVS Leader)

$10k

Payment made

Cycubix

OWASP Zap

$5k

Approved

Contrast Security

OWASP SKF

$15k

Awaiting Payment (Invoiced 9/6/2022)

OWASP

OWASP SAMM

$20k

Approved

OWASP

Netnea (Christian Folini)

$24k

Awaiting Signature (Glenn ten Cate)

OWASP FOUNDATION

owasp.org

19 of 27

Events

Kelly Santalucia

Lauren Thomas

OWASP FOUNDATION

20 of 27

Global AppSec Events and CF at a glance

See smaller events planned in 2022 here.

Event

Date

Attendees

Trainees

Sponsors

Est. Profit

Status

Career Fair

Feb 22, 2022

1640

N/A

24

$14,750.00

Closed

Global AppSec Virtual Europe

June 6-10 2022

315 attendees/ 199 were paid

33 trainees

16 sponsors

$250,000/ Actuals TBD

Closed - revenue TBD - reviewing with finance

Global AppSec Virtual AsiaPac

Aug 29-Sept 1

Est. 500

Closed at 1677 conf. Attendees / 176 Japanese Track

N/A

Est. 10 booths / $170,000

$210,000.00

Actuals TBD

Closed- revenue TBD - reviewing with finance

Global AppSec San Francisco

Nov 14-18 2022

Est. 500 paid/ $283,625.00 / Current 367 attendees

Est. 70 / $106,250.00 / Current 65 trainees

Est. 20 booths / $275,000

Current: 35

$560,925

$145,529.85

On Track

OWASP FOUNDATION

owasp.org

21 of 27

AppSec Days at a glance

Event

Date

Attendees

Trainees

Sponsors

Profit

Status

AppSec Days SnowFroc

March 2022

300 / $22,500.00

100 / $12,500.00

$30,000.00

$17,020.00

Postponed to 2023

AppSec Days BeNeLux

April 2022

TBD

TBD

$21,832.75

TBD

Closed

OWASP Italy Day

September

TBD

TBD

TBD

TBD

Applied. Drafting budget

AppSec Days LASCON

October 2022

400 / $60,020.00

Current: 273

20 / $11,000.00 Current: 17

$99,000.00

Current: 13 $69,169

$17,720.00

Registration numbers are low

AppSec Days AppSec Cali

January 2023??

TBD

TBD

TBD

TBD

Not yet applied. Asked Fiona if she would consider hosting

SnowFROC

March 2023

TBD

TBD

TBD

TBD

Just applied for March 2, 2023

AppSec Days BASC

April 2023

TBD

TBD

TBD

TBD

Just applied for April 1, 2023

OWASP FOUNDATION

owasp.org

22 of 27

OWASP Career Fair: Closed

(Total Overall Est. Profit: $14,750)

Current / Submitted

Projected / Budgeted

Budgeted Income

Budgeted Expense

Budgeted Profit

Status

Attendees

1640

500

n/a

n/a

n/a

Closed

Trainees

n/a

n/a

n/a

n/a

n/a

n/a

Trainers

n/a

n/a

n/a

n/a

n/a

n/a

Sponsors

25

20

$14,750

n/a

$14,750

Closed

Speakers

n/a

n/a

n/a

n/a

n/a

n/a

Event location or virtual platform (vFairs)

$4,650

$5,000.00

n/a

$5,000.00

-$350.00

Completed (vFairs)

Catering

n/a

n/a

n/a

n/a

n/a

n/a

Marketing

n/a

$2,500.00

n/a

$2,500.00

-$2,500.00

Completed

OWASP FOUNDATION

owasp.org

23 of 27

AppSec Virtual Europe Status: Closed (Total Profit: TBD - currently reviewing with finance)

Current / Submitted

Projected / Budgeted

Budgeted Income

Budgeted Expense

Budgeted Profit

Status

Attendees

315 (199 paid)

200

€76,750.00 - Actual TBD

0

€76,750.00 - TBD

Closed

Trainees

33 (-7)

40

€34,650.00

0

€9,650.00

Closed

Trainers

Est. 13 - Actual 4 (-9)

13

0

€25,000.00 / Actual: TBD

€25,000.00 / Actual: TBD

Closed

Sponsors

16

17 booths

$300,00 Actual TBD

0

$300,000

Closed

Speakers

58

74 (including 4 Keynotes)

0

0

0

Closed

Event location or virtual platform

1

€50,000.00

0

0

0

Closed

Catering

n/a

n/a

n/a

n/a

n/a

n/a

OWASP FOUNDATION

owasp.org

24 of 27

AppSec Virtual AsiaPac: On Track (Estimated total profit: $210,000) - (Total Profit: TBD - currently reviewing with finance)

Current / Submitted

Projected / Budgeted

Budgeted Income

Budgeted Expense

Budgeted Profit

Status

Attendees

1677 conf. Attendees / 176 Japanese Track

500

$25,000.00 - Now $0 conference free

0

$25,000.00 - Now $0 conference free

Closed

Trainees

N/A

N/A

N/A

N/A

N/A

N/A

Trainers

N/A

N/A

N/A

N/A

N/A

N/A

Sponsors

6

10

$200,000.00

TBD

$200,000.00

Closed

Speakers

6

4

0

0

0

Closed

Marketing and virtual platform

$15,000.00

$15,000.00

0

$15,000.00

0

Closed

Catering

N/A

N/A

N/A

N/A

N/A

N/A

OWASP FOUNDATION

owasp.org

25 of 27

Global AppSec San Francisco: On track

(Total estimated Profit: $145,529.85)

Current / Submitted

Projected / Budgeted

Budgeted Income

Budgeted Expense

Budgeted Profit

Status

Attendees

367

500

$283,625.00

0

$283,625.00

On Track - Registration opened 6/22

Trainees

65

70

$106,250.00

0

$106,250.00

On Track

Trainers

8

6

0

$60,526.76

-$60,526.76

On Track

Sponsors

35

20

$275,000.00

0

$275,000.00

On Track - Exceeding

Speakers

162

60

0

-$3,200.00 (airfare for keynotes)

-$3,200.00

On Track

Event location or virtual platform

N/A

N/A

N/A

N/A

N/A

N/A - venue rental waived with F&B

Catering

0

$244,831.07

0

-$244,831.07

-$244,831.07

On Track

OWASP FOUNDATION

owasp.org

26 of 27

2022 LASCON Status: On Track (Estimated total profit: $17,720.00)

Current / Submitted

Projected / Budgeted

Budgeted Income

Budgeted Expense

Budgeted Profit

Status

Attendees

273

400

$60,020.00

0

$60,020.00

Low Registration

Trainees

17

20

$11,000.00

0

$11,000.00

On Track

Trainers

0

4

0

$26,400

0

On Track

Sponsors

13

10

$99,000.00

0

$99,000.00

On Track

Speakers

2

53

0

$2,800.00

0

On Track

Event location

$75,000.00

$75,000.00

0

$75,000.00

0

Contract Signed

Catering

n/a

n/a

n/a

n/a

n/a

On Track - f&b included in event location

OWASP FOUNDATION

owasp.org

27 of 27

AppSec Days SnowFroc Status: Postponed to 2023 due to Covid

Current / Submitted

Projected / Budgeted

Budgeted Income

Budgeted Expense

Budgeted Profit

Status

Attendees

0

300

$22,500.00

0

$22,500.00

Postponed

Trainees

0

100

$12,500.00

0

$12,500.00

Postponed

Trainers

0

0

0

0

0

Postponed

Sponsors

0

10

$30,000.00

0

$30,000.00

Postponed

Speakers

n/a

n/a

n/a

n/a

n/a

Postponed

Event location or virtual platform

$13,180.00

$13,180.00

0

$13,180.00

-$13,180.00

Postponed

Catering

$24,500.00

$24,500.00

$24,500.00

$24,500.00

-$24,500.00

Postponed

OWASP FOUNDATION

owasp.org