Lazo Lab Sign up

Web Security / Thinking like a defender

Lesson 1 of 27

The OWASP Top 10

OWASP publishes the ten most critical web app risks, including broken access control, injection, and security misconfiguration. It's the checklist every web developer should know.

Key points

  • Broken access control is #1
  • Injection is still common
  • owasp.org has free guides
Watch a video on thisOpens YouTube search results for “The OWASP Top 10” in a new tab

Quiz · +10 XP

What is the OWASP Top 10?

Log in to save progress and earn XP.