OWASP Top 10 2025 Security Risks
The page presents the 2025 OWASP Top 10, a consensus awareness standard for critical web application risks, useful for prioritizing secure development and risk reduction.
https://owasp.org/www-project-top-ten/
This chat started after Adedeji Olowe wrote about what Lendsqr is facing. Read it and the follow-up it kicked off.
We run this as the baseline and map our internal tests to it. It keeps the argument about scope short.
The access control entry deserves more attention than it gets. Most of the damage we saw this year started right there.