Which of the following provides an easy way to programmers for writing lower-risk applications and retrofitting security into an existing application?

Watermarking is used for copyright protection or tracking, not for building secure software or retrofitting security into an application's code logic.

Code obfuscation aims to make code difficult to understand or reverse-engineer, which is a defensive technique but does not directly help programmers write lower-risk applications by providing security controls.

An encryption wrapper typically refers to a component that encrypts data, which is a specific security function, but not a comprehensive API designed to help programmers build overall lower-risk applications.

ESAPI (Enterprise Security API) is an open-source web application security control library that makes it easier for developers to write lower-risk applications. It provides a set of security functions and APIs to handle common security challenges like input validation, authentication, and output encoding, thus enabling both new secure development and retrofitting security into existing applications.