Free trial Request quote Contact me

OWASP top 10

The Open Web Application Security Project

The Open Web Application Security Project (OWASP) is a non-profit organization that was founded in 2001 and runs a number of different projects that promote security in applications. The organization is located all over the world and has over 30,000 members. One of OWASP's foremost projects is OWASP top 10. This list was published for the first time in 2003 and is updated on a regular basis. The latest version was released in 2018 and is called OWASP top 10 version 2017. The goal of the list is to raise awareness of application security by highlighting some of the most critical risks in web applications that organizations face.

According to the top 10 list, organizations ensure good security by scanning web applications such as websites, intranets, extranets, portals and other web-based services for vulnerabilities.

OWASP top 10 categories:

  • A1: Injection
  • A2: Broken Authentication
  • A3: Sensitive Data Exposure
  • A4: XML External Entities (XXE)
  • A5: Broken Access Control
  • A6: Security Misconfiguration
  • A7: Cross-Site Scripting (XSS)
  • A8: Insecure Deserializatio
  • A9: Using Components with Known Vulnerabilities
  • A10: Insufficient Logging and Monitoring


Test compliance with the OWASP top 10

Holm Security helps your organization to automatically and continuously test your web applications for vulnerabilities according to OWASP top 10.

Challenge:Solution:Description:
Making sure no vulnerabilities exists in the web applications.
Vulnerability assessment of web applications.
Our service Web Application Scanning detects web application vulnerabilities.
Prove compliance with OWASP top 10.
ReportsReports that demonstrate compliance with OWASP top 10 version 2017.