Cybersecurity definition
What is OWASP Top 10?
By Cyber Tool Stack Editorial TeamUpdated
Definition
A regularly updated, community-researched ranking of the most critical web application security risks, published by the OWASP Foundation and widely used as a baseline checklist for secure development. The current edition, OWASP Top 10:2025, was the first major update since 2021.
Where OWASP Top 10 fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
CWECommon Weakness EnumerationA catalog of general categories of security weaknesses in software design or code — like SQL injection or improper input validation — as distinct from CVE, which tracks specific, individual instances of a vulnerability in a specific product.WAFWeb Application FirewallA filter that sits in front of a web application or API, inspecting incoming requests for attack patterns like SQL injection and cross-site scripting and blocking them before they reach the application.