# OWASP Top 10 guides for Web, Mobile, API, LLM, and Agentic Locale: `en` Source: `/en/compliance/owasp-top-10/` Summary: Browse OWASP Top 10 editions by area: Web 2025, Mobile 2024, API 2023, LLM 2026, and Agentic 2026 guides. On this page 1. [Overview](/en/compliance/owasp-top-10/#topic-overview) 2. [Choose an OWASP guide by scope](/en/compliance/owasp-top-10/#owasp-series-guides) # OWASP Top 10 guides for Web, Mobile, API, LLM, and Agentic Explore the current OWASP Top 10 editions by technology area. Each guide has ten linkable risk sections, original high-level testing guidance, an educational diagram, and a link to the official OWASP source. [ ![A01:2025 Broken Access Control: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-broken-access-control-en-v1.webp) ](/assets/compliance/owasp-web-broken-access-control-en-v1.webp) OWASP Top 10:2025 for web applications - A01:2025 ## Broken Access Control Authorization rules do not consistently enforce what an authenticated user may view, change, approve, or administer. [ ![A02:2025 Security Misconfiguration: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-security-misconfiguration-en-v1.webp) ](/assets/compliance/owasp-web-security-misconfiguration-en-v1.webp) OWASP Top 10:2025 for web applications - A02:2025 ## Security Misconfiguration Unsafe defaults, unnecessary features, permissive cloud settings, or missing hardening leave systems exposed. [ ![A03:2025 Software Supply Chain Failures: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-software-supply-chain-failures-en-v1.webp) ](/assets/compliance/owasp-web-software-supply-chain-failures-en-v1.webp) OWASP Top 10:2025 for web applications - A03:2025 ## Software Supply Chain Failures Third-party packages, build systems, update channels, and dependencies are not governed well enough to preserve integrity. [ ![A04:2025 Cryptographic Failures: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-cryptographic-failures-en-v1.webp) ](/assets/compliance/owasp-web-cryptographic-failures-en-v1.webp) OWASP Top 10:2025 for web applications - A04:2025 ## Cryptographic Failures Sensitive data is exposed because encryption, key management, protocol choices, or data classification are inadequate. [ ![A05:2025 Injection: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-injection-en-v1.webp) ](/assets/compliance/owasp-web-injection-en-v1.webp) OWASP Top 10:2025 for web applications - A05:2025 ## Injection Untrusted input is interpreted as a command, query, template, or expression by a downstream component. [ ![A06:2025 Insecure Design: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-insecure-design-en-v1.webp) ](/assets/compliance/owasp-web-insecure-design-en-v1.webp) OWASP Top 10:2025 for web applications - A06:2025 ## Insecure Design The product design lacks security requirements, misuse cases, or controls needed for the business workflow it supports. [ ![A07:2025 Authentication Failures: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-authentication-failures-en-v1.webp) ](/assets/compliance/owasp-web-authentication-failures-en-v1.webp) OWASP Top 10:2025 for web applications - A07:2025 ## Authentication Failures Identity proofing, session handling, recovery, or credential defenses do not reliably establish and maintain the right user identity. [ ![A08:2025 Software or Data Integrity Failures: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-software-or-data-integrity-failures-en-v1.webp) ](/assets/compliance/owasp-web-software-or-data-integrity-failures-en-v1.webp) OWASP Top 10:2025 for web applications - A08:2025 ## Software or Data Integrity Failures Applications trust code, updates, serialized objects, or data from an integrity boundary that has not been verified. [ ![A09:2025 Security Logging and Alerting Failures: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-security-logging-and-alerting-failures-en-v1.webp) ](/assets/compliance/owasp-web-security-logging-and-alerting-failures-en-v1.webp) OWASP Top 10:2025 for web applications - A09:2025 ## Security Logging and Alerting Failures Important security events are not recorded, protected, correlated, or acted on in time. [ ![A10:2025 Mishandling of Exceptional Conditions: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-web-mishandling-exceptional-conditions-en-v1.webp) ](/assets/compliance/owasp-web-mishandling-exceptional-conditions-en-v1.webp) OWASP Top 10:2025 for web applications - A10:2025 ## Mishandling of Exceptional Conditions Failures, timeouts, overload, and unexpected states are handled inconsistently or fail open. [ ![M1 Improper Credential Usage: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-improper-client-access-use-en-v1.webp) ](/assets/compliance/owasp-mobile-improper-client-access-use-en-v1.webp) OWASP Mobile Top 10:2024 - M1 ## Improper Credential Usage Secrets, tokens, API keys, or passwords are embedded, reused, exposed, or handled without an appropriate lifecycle. [ ![M2 Inadequate Supply Chain Security: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-inadequate-supply-chain-security-en-v1.webp) ](/assets/compliance/owasp-mobile-inadequate-supply-chain-security-en-v1.webp) OWASP Mobile Top 10:2024 - M2 ## Inadequate Supply Chain Security Mobile SDKs, build plugins, signing systems, and distribution dependencies are not sufficiently governed. [ ![M3 Insecure Authentication and Authorization: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-insecure-authentication-authorization-en-v1.webp) ](/assets/compliance/owasp-mobile-insecure-authentication-authorization-en-v1.webp) OWASP Mobile Top 10:2024 - M3 ## Insecure Authentication and Authorization The app or its backend accepts weak identity proof, session handling, or permission decisions. [ ![M4 Insufficient Input/Output Validation: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-insufficient-input-output-validation-en-v1.webp) ](/assets/compliance/owasp-mobile-insufficient-input-output-validation-en-v1.webp) OWASP Mobile Top 10:2024 - M4 ## Insufficient Input/Output Validation Data crossing application, device, backend, browser, or third-party boundaries is trusted without sufficient checks. [ ![M5 Insecure Communication: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-insecure-communication-en-v1.webp) ](/assets/compliance/owasp-mobile-insecure-communication-en-v1.webp) OWASP Mobile Top 10:2024 - M5 ## Insecure Communication Network traffic, certificate handling, or channel selection does not adequately protect data in transit. [ ![M6 Inadequate Privacy Controls: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-inadequate-privacy-controls-en-v1.webp) ](/assets/compliance/owasp-mobile-inadequate-privacy-controls-en-v1.webp) OWASP Mobile Top 10:2024 - M6 ## Inadequate Privacy Controls The app collects, shares, retains, or exposes personal data beyond the disclosed and necessary purpose. [ ![M7 Insufficient Binary Protections: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-insufficient-binary-protections-en-v1.webp) ](/assets/compliance/owasp-mobile-insufficient-binary-protections-en-v1.webp) OWASP Mobile Top 10:2024 - M7 ## Insufficient Binary Protections The distributed app does not sufficiently resist unauthorized modification, repackaging, or analysis for its threat model. [ ![M8 Security Misconfiguration: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-security-misconfiguration-en-v1.webp) ](/assets/compliance/owasp-mobile-security-misconfiguration-en-v1.webp) OWASP Mobile Top 10:2024 - M8 ## Security Misconfiguration Build variants, platform settings, exported components, or backend configuration expose unintended behavior. [ ![M9 Insecure Data Storage: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-insecure-data-storage-en-v1.webp) ](/assets/compliance/owasp-mobile-insecure-data-storage-en-v1.webp) OWASP Mobile Top 10:2024 - M9 ## Insecure Data Storage Sensitive data is stored locally or cached where another application, backup, device user, or forensic process can access it. [ ![M10 Insufficient Cryptography: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-mobile-insufficient-cryptography-en-v2.webp) ](/assets/compliance/owasp-mobile-insufficient-cryptography-en-v2.webp) OWASP Mobile Top 10:2024 - M10 ## Insufficient Cryptography Cryptographic algorithms, modes, random values, keys, or implementations do not protect mobile data as intended. [ ![API1:2023 Broken Object Level Authorization: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-broken-object-level-authorization-en-v1.webp) ](/assets/compliance/owasp-api-broken-object-level-authorization-en-v1.webp) OWASP API Security Top 10:2023 - API1:2023 ## Broken Object Level Authorization An API accepts an object identifier without confirming that the caller is allowed to access that specific object. [ ![API2:2023 Broken Authentication: Attack entry, Security failure, Impact, Risk reduction](/assets/compliance/owasp-api-broken-authentication-en-v2.webp) ](/assets/compliance/owasp-api-broken-authentication-en-v2.webp) OWASP API Security Top 10:2023 - API2:2023 ## Broken Authentication API identity, token, session, credential, or recovery mechanisms can be bypassed, replayed, or abused. [ ![API3:2023 Broken Object Property Level Authorization: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-broken-object-property-level-authorization-en-v1.webp) ](/assets/compliance/owasp-api-broken-object-property-level-authorization-en-v1.webp) OWASP API Security Top 10:2023 - API3:2023 ## Broken Object Property Level Authorization An API exposes or accepts properties that the caller should not be able to read or modify. [ ![API4:2023 Unrestricted Resource Consumption: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-unrestricted-resource-consumption-en-v1.webp) ](/assets/compliance/owasp-api-unrestricted-resource-consumption-en-v1.webp) OWASP API Security Top 10:2023 - API4:2023 ## Unrestricted Resource Consumption Requests can consume excessive compute, memory, storage, network capacity, or paid downstream services. [ ![API5:2023 Broken Function Level Authorization: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-broken-function-level-authorization-en-v1.webp) ](/assets/compliance/owasp-api-broken-function-level-authorization-en-v1.webp) OWASP API Security Top 10:2023 - API5:2023 ## Broken Function Level Authorization An API endpoint or action is reachable by a caller whose role should not perform that function. [ ![API6:2023 Unrestricted Access to Sensitive Business Flows: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-unrestricted-access-to-sensitive-business-flows-en-v1.webp) ](/assets/compliance/owasp-api-unrestricted-access-to-sensitive-business-flows-en-v1.webp) OWASP API Security Top 10:2023 - API6:2023 ## Unrestricted Access to Sensitive Business Flows An API permits automation or repetition of a legitimate high-value business flow without enough abuse resistance. [ ![API7:2023 Server Side Request Forgery: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-server-side-request-forgery-en-v1.webp) ](/assets/compliance/owasp-api-server-side-request-forgery-en-v1.webp) OWASP API Security Top 10:2023 - API7:2023 ## Server Side Request Forgery A server fetches a caller-controlled URL or network destination without enough destination controls. [ ![API8:2023 Security Misconfiguration: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-security-misconfiguration-en-v1.webp) ](/assets/compliance/owasp-api-security-misconfiguration-en-v1.webp) OWASP API Security Top 10:2023 - API8:2023 ## Security Misconfiguration API gateways, CORS, headers, cloud resources, error handling, or defaults expose more than intended. [ ![API9:2023 Improper Inventory Management: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-improper-inventory-management-en-v1.webp) ](/assets/compliance/owasp-api-improper-inventory-management-en-v1.webp) OWASP API Security Top 10:2023 - API9:2023 ## Improper Inventory Management Teams do not know all API hosts, versions, environments, owners, and exposed data flows. [ ![API10:2023 Unsafe Consumption of APIs: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-api-unsafe-consumption-of-apis-en-v2.webp) ](/assets/compliance/owasp-api-unsafe-consumption-of-apis-en-v2.webp) OWASP API Security Top 10:2023 - API10:2023 ## Unsafe Consumption of APIs An application trusts data, availability, authentication, or behavior from an upstream API more than it should. [ ![LLM01:2026 Prompt Injection: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-prompt-injection-en-v1.webp) ](/assets/compliance/owasp-llm-prompt-injection-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM01:2026 ## Prompt Injection Untrusted content, including cross-modal input such as image, audio, or video, influences a model to disregard intended instructions, reveal information, or take an unsafe path. [ ![LLM02:2026 Sensitive Information Disclosure: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-sensitive-information-disclosure-en-v1.webp) ](/assets/compliance/owasp-llm-sensitive-information-disclosure-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM02:2026 ## Sensitive Information Disclosure An LLM application exposes secrets, personal data, confidential context, or protected output to an unauthorized audience. [ ![LLM03:2026 Excessive Agency: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-excessive-agency-en-v3.webp) ](/assets/compliance/owasp-llm-excessive-agency-en-v3.webp) OWASP Top 10 for LLM Applications:2026 - LLM03:2026 ## Excessive Agency Rank 3 in the 2026 edition: an LLM agent has more tools, permissions, autonomy, or action scope than the task requires. [ ![LLM04:2026 Supply Chain: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-supply-chain-en-v1.webp) ](/assets/compliance/owasp-llm-supply-chain-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM04:2026 ## Supply Chain Models, datasets, plugins, agents, frameworks, and hosted services introduce dependencies that are not adequately trusted or governed, including a promoted model artifact that is not what it claims to be. [ ![LLM05:2026 Data and Model Poisoning: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-data-and-model-poisoning-en-v1.webp) ](/assets/compliance/owasp-llm-data-and-model-poisoning-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM05:2026 ## Data and Model Poisoning Training, fine-tuning, evaluation, or retrieval data is manipulated to degrade quality, bias outcomes, or create unwanted behavior. The 2026 edition absorbs fine-tuning subversion into this category. [ ![LLM06:2026 Unbounded Consumption: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-unbounded-consumption-en-v1.webp) ](/assets/compliance/owasp-llm-unbounded-consumption-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM06:2026 ## Unbounded Consumption An LLM application permits uncontrolled token, compute, tool, storage, or external-service consumption. [ ![LLM07:2026 Misinformation: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-misinformation-en-v1.webp) ](/assets/compliance/owasp-llm-misinformation-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM07:2026 ## Misinformation An LLM produces plausible but false, incomplete, outdated, or poorly sourced information that users rely on. [ ![LLM08:2026 Hidden Context Exposure: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-hidden-context-exposure-en-v1.webp) ](/assets/compliance/owasp-llm-hidden-context-exposure-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM08:2026 ## Hidden Context Exposure The 2026 successor to System Prompt Leakage: system prompts, hidden context, or operational state are disclosed and may reveal confidential logic, data, or assumptions. [ ![LLM09:2026 Vector and Embedding Weaknesses: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-vector-and-embedding-weaknesses-en-v1.webp) ](/assets/compliance/owasp-llm-vector-and-embedding-weaknesses-en-v1.webp) OWASP Top 10 for LLM Applications:2026 - LLM09:2026 ## Vector and Embedding Weaknesses Vector stores and retrieval pipelines lack appropriate access control, tenant separation, data governance, or integrity controls. [ ![LLM10:2026 Improper Output Handling: Attack entry, Security failure, Impact, Stop/control](/assets/compliance/owasp-llm-improper-output-handling-en-v3.webp) ](/assets/compliance/owasp-llm-improper-output-handling-en-v3.webp) OWASP Top 10 for LLM Applications:2026 - LLM10:2026 ## Improper Output Handling Downstream systems trust or render model output without validation, encoding, or policy checks, including insecure code that assistants generate at scale. [ ![ASI01:2026 Agent Goal Hijack: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-agent-goal-hijack-en-v1.webp) ](/assets/compliance/owasp-agent-agent-goal-hijack-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI01:2026 ## Agent Goal Hijack Untrusted prompt inputs or RAG context manipulate the agent's objective and decision logic, causing it to abandon original instructions and pursue malicious goals. [ ![ASI02:2026 Tool Misuse and Exploitation: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-tool-misuse-exploitation-en-v2.webp) ](/assets/compliance/owasp-agent-tool-misuse-exploitation-en-v2.webp) OWASP Top 10 for Agentic Applications:2026 - ASI02:2026 ## Tool Misuse and Exploitation An agent is tricked into calling integrated tools, database APIs, or external services with unvalidated parameters. [ ![ASI03:2026 Identity and Privilege Abuse: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-identity-privilege-abuse-en-v1.webp) ](/assets/compliance/owasp-agent-identity-privilege-abuse-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI03:2026 ## Identity and Privilege Abuse An agent runs with overprivileged credentials or shared service accounts, letting normal users trigger elevated actions through the agent. [ ![ASI04:2026 Agentic Supply Chain Vulnerabilities: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-agentic-supply-chain-vulnerabilities-en-v1.webp) ](/assets/compliance/owasp-agent-agentic-supply-chain-vulnerabilities-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI04:2026 ## Agentic Supply Chain Vulnerabilities Dynamic third-party components activate without verified provenance, integrity, or attestation. [ ![ASI05:2026 Unexpected Code Execution (RCE): Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-unexpected-code-execution-en-v1.webp) ](/assets/compliance/owasp-agent-unexpected-code-execution-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI05:2026 ## Unexpected Code Execution An agent generates and executes Python scripts, shell commands, or queries directly on the host server without isolation. [ ![ASI06:2026 Memory & Context Poisoning: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-memory-context-poisoning-en-v1.webp) ](/assets/compliance/owasp-agent-memory-context-poisoning-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI06:2026 ## Memory & Context Poisoning False data or embedded exploits corrupt an agent's short-term memory, vector stores, or long-term knowledge base. [ ![ASI07:2026 Insecure Inter-Agent Communication: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-insecure-inter-agent-communication-en-v2.webp) ](/assets/compliance/owasp-agent-insecure-inter-agent-communication-en-v2.webp) OWASP Top 10 for Agentic Applications:2026 - ASI07:2026 ## Insecure Inter-Agent Communication Exchanges between agents in a multi-agent network lack mutual authentication, encryption, or message integrity checks. [ ![ASI08:2026 Cascading Failures: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-cascading-failures-en-v1.webp) ](/assets/compliance/owasp-agent-cascading-failures-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI08:2026 ## Cascading Failures Delegation, retries, and feedback loops propagate it without effective failure isolation. [ ![ASI09:2026 Human-Agent Trust Exploitation: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-human-agent-trust-exploitation-en-v1.webp) ](/assets/compliance/owasp-agent-human-agent-trust-exploitation-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI09:2026 ## Human-Agent Trust Exploitation An adversary uses an agent's persuasive, human-like interaction to trick users into executing harmful actions. [ ![ASI10:2026 Rogue Agents: Attack entry, Trust boundary failure, Impact, Risk reduction](/assets/compliance/owasp-agent-rogue-agents-en-v1.webp) ](/assets/compliance/owasp-agent-rogue-agents-en-v1.webp) OWASP Top 10 for Agentic Applications:2026 - ASI10:2026 ## Rogue Agents Behavioral-integrity and governance controls fail to detect or contain sustained deviation from declared function and scope. 150 ## Choose an OWASP guide by scope - OWASP 2025 [OWASP Top 10:2025 for web applications](/en/compliance/owasp-top-10/web/) A practical guide to the ten risk categories in the current OWASP Top 10:2025. Use it to scope web application testing, align remediation work, and link findings to the official OWASP taxonomy. - OWASP 2024 [OWASP Mobile Top 10:2024](/en/compliance/owasp-top-10/mobile/) A guide to the ten current OWASP Mobile Top 10:2024 categories for Android, iOS, and the services they depend on. - OWASP 2023 [OWASP API Security Top 10:2023](/en/compliance/owasp-top-10/api/) A guide to the current stable OWASP API Security Top 10:2023 categories for APIs, integrations, and service-to-service boundaries. - OWASP 2026 [OWASP Top 10 for LLM Applications:2026](/en/compliance/owasp-top-10/llm/) A guide to the current OWASP Top 10 for LLM Applications:2026, covering model-facing inputs, data, tool use, supply chains, and operational safeguards. - OWASP 2026 [OWASP Top 10 for Agentic Applications:2026](/en/compliance/owasp-top-10/agent/) A guide to the ten risk categories in the OWASP Top 10 for Agentic Applications:2026 framework, addressing autonomous AI decision-making, tool execution, identity boundaries, and multi-agent systems. Open full-size image to zoom ## Need a pentest that satisfies these requirements? Tell us about your systems and the requirements you must meet. The STH team will assess the approach and prepare a quotation. [Request a Pentest quote](/en/#contact) Last updated 16 October 2026