APSA standards
Three clear certification scopes.
APSA 100 certifies a defined application. APSA 200 and APSA 300 certify providers within their approved service scope.
APSA 100
Application Security Assurance Standard
A specific digital application, product, or defined application system.
APSA 200Application Security Assessment Provider Standard
Organizations that assess the application security of other organizations.
APSA 300Secure Application Development Provider Standard
Organizations that develop security-sensitive applications for themselves or for others.