2023 OWASP Top 10

Unsafe Consumption of APIs

A deep dive of unsafe consumption of APIs: how it happens, which…

Improper Asset Management

A deep dive of improper asset management: how it happens, which cybersecurity roles are responsible for dealing with it and how to prevent and mitigate this risk.

Lack of Protection from Automated Threats

Automated threats are malicious activities that use software tools or scripts to…

Security Misconfiguration

A deep dive of security misconfiguration: how it happens, which…

Server-side Request Forgery

Server-side request forgery (SSRF) is a type of web application vulnerability that allows an attacker to make…

Broken Function Level Authorization (BFLA)

A deep dive on how broken function level authorization…

Unrestricted Resource Consumption

A deep dive on how unrestricted resource consumption happens, which…

Broken Object Property Level Authorization

In this fourth blog post of our 2023 OWASP Top 10 series, we will explore one of the…

Broken Authentication

Broken authentication is one of the most common and dangerous web application security risks. It can lead to data…