OWASP / Top10

git clone https://github.com/OWASP/Top10.git 🔥 on GitHub Trending today

Official repository for the OWASP Top 10 document, a ranked list of the most critical web application security risks.

Why you might care

Provides the canonical source for the OWASP Top 10:2025 release, with prior 2021 and 2017 editions kept for reference. Useful for developers, security teams, and auditors who need a standard awareness baseline for web application risks.

Alternatives

OWASP ASVSOWASP Cheat Sheet SeriesMITRE CWE Top 25

stars, 24h · #3,039

+~28

stars, 7 days · #3,811

+246

stars, 30 days · #2,086

6.3k

★ total · +0% this week

1.2k

forks · 58 open issues

Star history (as recorded here)

2026-10-20 · 6,341 ★ 2026-10-21 · 6,345 ★

LanguageHTML

License—

Created2016-08-30 (10y ago)

Last push27d ago

Watchers306

OwnerOrganization

Seen on GitHub Trending

2026-10-21 — #4 monthly in html · +246 ★
2026-10-20 — #4 monthly in html · +245 ★

Links

GitHub: github.com/OWASP/Top10
Releases · Issues · Hacker News mentions

README excerpt

# Top10
 Official OWASP Top 10 Document Repository 
## OWASP Top 10 2025 - RELEASED
We have released the OWASP Top 10:2025 (Final):
- OWASP Top10:2025
Please log any feedback, comments, or log issues here.
## OWASP Top 10 2021 - SUPERSEDED
- OWASP Top10:2021
## OWASP Top 10 2017 - HISTORIC
- OWASP Top 10:2017 (PPTX).pptx)
- OWASP Top 10:2017 (PDF).pdf)
## OWASP Top 10 Leadership
There are currently five co-leaders for the OWASP Top 10:
* Andrew van der Stock - X: @vanderaj
* Brian Glas - X: @infosecdad
* Neil Smithline - X: @appsecneil
* Tanya Janca - X: @shehackspurple
* Torsten Gigler - Mastodon: @torsten_gigler@infosec.exchange
## OWASP Top 10 References
- OWASP Top 10 Project Page
- HISTORIC: OWASP 2017 Summit Outcomes