Which of the following provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application?

Watermarking embeds information into data to claim ownership or track its distribution, which is not a tool for writing lower-risk applications.

ESAPI (Enterprise Security API) is an open-source web application security framework that makes it easier for developers to write lower-risk applications by providing a library of standardized security controls and helper functions for common security tasks like input validation, output encoding, and authentication. It helps in implementing security without reinventing the wheel and can be used to retrofit security into existing applications.

An encryption wrapper applies encryption to data, primarily for confidentiality, but doesn't provide a comprehensive framework for application security development.

Code obfuscation makes code harder to understand, typically to deter reverse engineering, but does not inherently make an application lower-risk from a security vulnerability perspective.