AppSec Pipelines take the principles of DevOps and Lean and applies that to an application security program.[16] OWASP Automated Threats to Web Applications: Published July 2015[17] - the OWASP Automated Threats to Web Applications Project aims to provide definitive information and other resources for architects, developers, testers and others to help defend against automated threats such as credential stuffing. The project outlines the top 20 automated threats as defined by OWASP.[18]