
GenAI-LLM-Top10
OWASP Top 10 for Large Language Model Applications

OWASP Top 10 for Large Language Model Applications

OWASP framework cataloging the top 10 security risks in neocloud and AI data center infrastructure, covering hardware, networking, isolation,…

OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).

Automated SBOM-to-VEX pipeline using a secure multi-agent AI system to analyze CVEs, reason about exploitability, and generate signed CycloneDX VEX…

A structured knowledge base covering AI security fundamentals, threat modeling, red team offensive techniques, and blue team defenses, including LLM…

OWASP project for AI-assisted threat modeling, helping teams identify, analyze, and document security threats and mitigations in system designs.

OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

OWASP enumeration of common security and privacy weaknesses in mobile applications, serving as a reference bridging the MASVS verification standard…

Centralized YAML-based knowledge base linking MITRE CWE, OWASP Top10, ASVS, and other security standards with versioned references. Includes MkDocs…

The most comprehensive LLM + MCP security guide i.e. OWASP aligned, real CVEs, actionable checklists

Vendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…

Open standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…

Official OWASP Top 10 Document Repository

Open-source cross-modal and multimodal prompt injection test suite. 250,000+ attack payloads across text, image, document, and audio modalities.…

OWASP-maintained Top 10 API security risks document and documentation portal with best practices for building, breaking, and defending APIs.

A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security

OWASP Smart Contract Security (SCS) Project