The 34 Common Weakness Enumerations (CWEs) mapped to Broken Access Control had more occurrences in applications than any other category.

There are three new categories, four categories with naming and scoping changes, and some consolidation in the Top. Using the OWASP Top 10 is perhaps the most effective first step towards changing the software development culture within your organization into one that produces more secure code. Globally recognized by developers as the first step towards more secure coding.Ĭompanies should adopt this document and start the process of ensuring that their web applications minimize these risks.

It represents a broad consensus about the most critical security risks to web applications. The OWASP Top 10 is a standard awareness document for developers and web application security.