Cybersecurity glossary
What is OWASP Top 10?
Definition
The OWASP Top 10 is an awareness list of the most critical security risks to web applications, published by the Open Worldwide Application Security Project.
Why it matters
Categories include broken access control, injection and security misconfiguration. OWASP publishes a separate Top 10 for LLM Applications covering AI-specific risks.
Common questions about OWASP Top 10
Sources
Related Guides
GuideAI Security
10 LLM Security Risks Every Team Should Understand
Examine the top 10 LLM security risks affecting modern applications and learn concrete defensive controls to safeguard your data, models, and infrastructure.
Read more GuideAI Security
How to Conduct LLM Security Testing for Web Applications
Learn how to perform LLM security testing to identify prompt injection, sensitive data leakage, and insecure output handling before production deployment.
Read more GuideWeb Security
A Practical Guide to HTTP Security Headers for Web Developers
Why modern web applications need CSP, HSTS, and X-Content-Type-Options, and how to configure them properly in Next.js and Nginx.
Read more GuideWeb Security
How to Protect Your Projects From Malicious npm Packages (and What GitHub's New Package Firewall Does)
GitHub launched a package firewall that blocks risky npm packages before they install. Learn how it works, who can use it and 10 steps any team can take today.
Read more