OWASP Top 10

The globally recognized standard: a community-driven report detailing the 10 most critical security risks facing web applications.

The OWASP Top 10 is the definitive awareness document for web application security, updated regularly (e.g., 2021, 2025 planned) by a global team of experts. It prioritizes the top ten most critical risks, guiding development teams to focus remediation efforts efficiently. For example, 'Broken Access Control' (A01:2021) moved to the number one spot, a vulnerability found in 94% of tested applications. The list also highlights persistent threats like 'Injection' (A03:2021) and newer categories such as 'Insecure Design' (A04:2021). Adopt this non-profit, consensus-based list to establish a security baseline and minimize your application's risk profile.

https://owasp.org/Top10/