OWASP application security verification standard project INCLUDES:

Use as a metric: It provides application owners and application developers with a YARDSTICK with which to analyze the degree of trust that can be placed in their web applications

Use as a guidance: It provides information to security control developers as to what to BUILD into security controls in order to meet the application security REQUIREMENTS

Use during procurement: It provides a basis for specifying application security verification requirements in contracts

OWASP application security verification standard project includes:

Use as a metric: It provides application owners and application developers with a yardstick with which to analyze the degree of trust that can be placed in their web applications

Use as a guidance: It provides information to security control developers as to what to build into security controls in order to meet the application security requirements

Use during procurement: It provides a basis for specifying application security verification requirements in contracts