open worldwide application security project OWASP

community developed security standards, guides and best practices documents. Also has open source tools

Top proactive controls

• define security requirements
• leverage security frameworks and librariesinfrastrcture

Also describes API security