Framework library · Global standards

OWASP LLM Top 10

OWASP Top 10 for LLM Applications. Published by OWASP GenAI Security Project, version 2025. Kapālins maps it to 11 controls. 9 of 11 controls are proved by a live signal from the platform, and 2 by the assessment.

Read the source document

Controls mapped
LLM00General LLM controlAssessment
LLM01Prompt InjectionLive signal
LLM02Sensitive Information DisclosureLive signal
LLM03Supply ChainLive signal
LLM04Data & Model PoisoningLive signal
LLM05Improper Output HandlingLive signal
LLM06Excessive AgencyLive signal
LLM07System Prompt LeakageLive signal
LLM08Vector & Embedding WeaknessesAssessment
LLM09MisinformationLive signal
LLM10Unbounded ConsumptionLive signal

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How the OWASP LLM Top 10 got here.

  1. Adopted

    OWASP published version 1.0 of the Top 10 for Large Language Model Applications. OWASP Foundation

  2. Amended

    OWASP released the 2025 edition of the Top 10 for LLM Applications. OWASP GenAI Security Project

  3. Amended

    OWASP GenAI Security Project published the 2026 edition of the Top 10 for LLM Applications. OWASP GenAI Security Project

See this framework on your estateAll 29 frameworks