OTRS: For OWASP AND For SDLC

Question

For OWASP:
Has the OTRS application kept the OWASP guidelines in place during its development. If so, is there a sharable report or document available and how can it be sourced?
If the OWASP guidelines were not considered, is there a process or tool that will help report whether OTRS does comply or is within the specified guidelines?

For SDLC:
Has the OTRS application used a SDLC (Software Development Life cycle process). If so, which SDLC model has been used?

Answer 1

OTRS Group consider different guidelines like OWASP etc during development but there are no documents or reports to share.

As OTRS is used in a lot of security related areas it is regulary checked and also there is a mature vulnerability handling process in place

Source: http://forums.otterhub.org