What is OWASP and what is its Top 10?
Options
- A non-profit that publishes free security guidance (Correct option)
- A cloud provider with a Top 10 of best services
- A committee that standardizes programming languages
- A government agency that audits large companies
Answer
A non-profit community that publishes free security guidance; the Top 10 lists the most critical risks for web applications
Why
OWASP (Open Worldwide Application Security Project) produces free articles, tools and cheat sheets about application security.
The OWASP Top 10 is its best-known list. In the 2025 edition the first categories are A01 Broken Access Control, A02 Security Misconfiguration, A03 Software Supply Chain Failures, A04 Cryptographic Failures and A05 Injection.
It is a good checklist to know for interviews.
Remember
OWASP Top 10 = the most critical web security risks.