OWASP Top 10 for LLM Applications 2025
by OWASP Gen AI Security Project
Use a shared vocabulary for discussing risks in LLM applications.
OWASP's 2025 publication organizes application-security concerns for teams reviewing their systems. This is a versioned reference, not a claim that the listed risks replace a workload-specific threat model.
- Level
- Intermediate
- Models
- any
- Category
- Security And Red Teaming
- Tags
- Source date
- date not stated
- Added
- 2026-10-18
- Last verified
- 2026-10-18
- Status
- ok
- Prerequisites
- Assumes basic LLM familiarity or the ability to read examples and configure a workflow.
- Subcategory
- threat frameworks and standards
- Region
- other
- Original language
- en
- Access
- free
- Resource reuse
- closed: No general open-reuse grant established from the inspected page. Closed is the conservative index bucket, not a legal finding; the resource is publicly readable. Facet definitions
Summary in our own words. Rights remain with the original creator. Credit and correction policy.