App, API & Mobile Security
Verification standards and top-ten lists for web apps, APIs, mobile apps and AI applications.
Checklists and frameworks
| Name | What it is |
|---|---|
| OWASP ASVS | The Application Security Verification Standard: testable requirements for web applications. |
| OWASP MASVS | The Mobile Application Security Verification Standard, with the MASTG testing guide. |
| OWASP Top 10 | The most critical web application security risks. |
| OWASP API Security Top 10 | The most critical risks specific to APIs. |
| OWASP Top 10 for LLM Applications | Risks specific to applications built on large language models, such as prompt injection. |