OWASP ASVS - Virtually Testing 

The OWASP Application Security Verification Standard (ASVS) Project provides a basis for testing web application technical security controls and also provides developers with a list of requirements for secure development. The excel tool Jay Durga developed can be used to measure metrics or as a guidance document for testing the effectiveness of security controls put in place in your SDLC and DevOps process.