WEB2PY is a free, open-source web framework for agile development of secure database-driven web applications. It is written in Python and programmable in Python. WEB2PY is a full-stack framework, meaning that it contains all the components you need to build fully functional web applications. WEB2PY is designed to guide a web developer to follow good software engineering practices, such as Model View Controller (MVC) pattern. WEB2PY separates the data representation (the model) from the data presentation (the view) and also from the application logic and workflow (the controller). WEB2PY provides libraries to help the developer desing, implement, and test each of these parts separately, and makes the work together. WEB2PY is built for security. This means that it automatically addresses many of the issues that can lead to security vulnerabilities, by following well established practices. For example, it validates all input (to prevent injections), escapes all output (to prevent cross-site scripting), renames uploaded files (to prevent directory traversal attacks), and stores all session information server side. WEB2PY leaves little choice to application developers in matters related to security.