OWASP/www-project-top-10-for-large-language-model-applications resource

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1378 stars · 352 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

The OWASP Top 10 for Large Language Model Applications, a community-driven guide to the most critical security risks facing LLM-powered applications. This repository is now a legacy archive; active development has moved to the OWASP GenAI Security Project's GenAI-LLM-Top10 repository.

Use cases

• identify the top security risks in LLM applications
• secure my chatbot or AI app against prompt injection
• learn about LLM application vulnerabilities
• checklist for reviewing GenAI app security
• reference for LLM security best practices
• train my team on AI application security risks

When to choose

• you need authoritative, community-reviewed guidance on LLM application security risks
• you are building a security review or threat model for an LLM-powered product
• you want a widely cited reference for AI/LLM appsec risk categories

When to avoid

• you need a tool or library that scans or mitigates vulnerabilities rather than documents them
• you want actively maintained content - use the successor GenAI-LLM-Top10 repository instead
• you need application-level security controls like auth or rate limiting

Facets

learning-resource · maturity maintenance

security documentation security large-language-models artificial-intelligence developer-tools llm-security appsec owasp top-10 genai security-guidance risk-assessment web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="OWASP/www-project-top-10-for-large-language-model-applications")