OWASP Top 10

Helps make websites and apps safer.

• • This page
  • LinkedIn
  • Bluesky
  • Mastodon
  • X
  • Email

About

The OWASP Top Ten is a list of the most critical security risks for web applications:

1. Broken Access Control: Unauthorized access to data.
2. Cryptographic Failures: Poor data protection.
3. Injection Attacks: Hackers insert harmful code.
4. Insecure Design: Security not built in.
5. Security Misconfiguration: Unsafe system setup.
6. Vulnerable and Outdated Components: Using outdated software.
7. Identification and Authentication Failures: Weak login controls.
8. Software and Data Integrity Failures: Untrusted updates allowed.
9. Security Logging and Monitoring Failures: Attacks go unnoticed.
10. Server-Side Request Forgery (SSRF): Servers access unintended resources.

Indicators

• Security

Links

• OWASP Top Ten Web Application Security Risks | OWASP Foundation
• Open Worldwide Application Security Project

Standards

• X-Content-Type-Options
• Clickjacking mitigation