[Owasp-leaders] Commercial use of OWASP products

Chris Schmidt chris.schmidt at owasp.org
Fri Jan 6 15:24:37 UTC 2012

Bruce -

Per the FAQ at

You are allowed to sell copies of the modified program commercially, but
only under the terms of the GNU GPL. Thus, for instance, you must make
the source code available to the users of the program as described in
the GPL, and they must be allowed to redistribute and modify it as
described in the GPL.

These requirements are the condition for including the GPL-covered code
you received in a program of your own

On 1/6/2012 7:49 AM, webgoat webgoat wrote:
> All
> What is the policy for the use of OWASP products in commercial
> solutions.  Over the years I've been asked by many people if they
> could use WebGoat in training environments, most of these have been
> for in-house training at companies or use by educators in the class
> room.  Recently, I was asked if it was OK to use WebGoat in a
> commercial training solution and what the fee for the use of WebGoat
> is.  I view this situation as slightly different than other requests
> and want to ensure I provide the proper OWASP guidance on this.   
> Thoughts?
> -- 
> Bruce Mayhew
> OWASP WebGoat Project Lead
> _______________________________________________
> OWASP-Leaders mailing list
> OWASP-Leaders at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-leaders
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20120106/05542a07/attachment.html>

More information about the OWASP-Leaders mailing list