OWASP Top 10 for LLM Applications
A list of security risks for large language model applications published by OWASP, enumerating the core risk categories facing LLM applications, such as prompt injection, excessive agency and data leakage.
Timeline (last 90 days)
The OWASP Top 10 for LLM Applications points out that the non-determinism of model behavior is why prompt changes need regression coverage.
In the OWASP Top 10 for LLM Applications, LLM05:2025 specifically discusses "Improper Output Handling," and LLM09:2025 discusses "Overreliance."
The OWASP Top 10 list of risks for large language model applications was first published in 2023 and updated in 2025.
OWASP has released the OWASP Top 10 for LLM Applications security risk list.
All Facts (4)
The OWASP Top 10 for LLM Applications points out that the non-determinism of model behavior is why prompt changes need regression coverage.
50%UnverifiedIn the OWASP Top 10 for LLM Applications, LLM05:2025 specifically discusses "Improper Output Handling," and LLM09:2025 discusses "Overreliance."
50%UnverifiedThe OWASP Top 10 list of risks for large language model applications was first published in 2023 and updated in 2025.
50%UnverifiedOWASP has released the OWASP Top 10 for LLM Applications security risk list.
50%