OL
OWASP LLM Top 10
FreeFrameworks & ChecklistsCommunity-maintained checklist of the ten most critical risks for LLM applications.
Last verified
overview
The OWASP Top 10 for LLM Applications is the de-facto threat checklist for AI/ML engineers shipping GenAI features. The 2025 edition covers prompt injection, sensitive information disclosure, supply-chain risks, data and model poisoning, improper output handling, excessive agency, system-prompt leakage, vector and embedding weaknesses, misinformation, and unbounded consumption. Free, vendor-neutral, and widely referenced by NIST, the EU AI Office, and enterprise security programs.
core features
- The OWASP Top 10 for LLM Applications is the de-facto threat checklist for AI/ML engineers shipping GenAI features.
- The 2025 edition covers prompt injection, sensitive information disclosure, supply-chain risks, data and model poisoning, improper output handling, excessive agency, system-prompt leakage, vector and embedding weaknesses, misinformation, and unbounded consumption.
- Free, vendor-neutral, and widely referenced by NIST, the EU AI Office, and enterprise security programs.
target frameworks
OWASP LLM Top 10NIST AI RMFMITRE ATLAS
faq
OWASP LLM Top 10 — frequently asked questions
- What is OWASP LLM Top 10?
- The OWASP Top 10 for LLM Applications is the de-facto threat checklist for AI/ML engineers shipping GenAI features. The 2025 edition covers prompt injection, sensitive information disclosure, supply-chain risks, data and model poisoning, improper output handling, excessive agency, system-prompt leakage, vector and embedding weaknesses, misinformation, and unbounded consumption. Free, vendor-neutral, and widely referenced by NIST, the EU AI Office, and enterprise security programs.
- Which compliance frameworks does OWASP LLM Top 10 support?
- OWASP LLM Top 10 addresses OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS, Open standard. Check the vendor site for the latest scope and any region-specific certifications.
- How much does OWASP LLM Top 10 cost?
- OWASP LLM Top 10 is free to use. Some advanced features may require a paid plan — check the pricing page for current limits.
- Who is OWASP LLM Top 10 for?
- Teams working on frameworks & checklists — particularly those that need to evidence OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS controls.
- Is OWASP LLM Top 10 open source?
- Yes — the source code is available on GitHub at https://github.com/OWASP/www-project-top-10-for-large-language-model-applications.
