The shift from 2021 (the last time the list came out) to 2025 represents more than minor adjustments, it's a fundamental shift in application security. Two entirely new categories entered the list and one category was consolidated into another, which highlights emerging risks that traditional testing often misses. These additions and shifts can be seen in the chart below:
OWASP Top 10 2025: What's changed and why it matters… Security decisions depend on this context. Without it, detection produces noisy alerts that slow down development rather than reducing risk. With it, organizations can triage quickly and manage risk effectively. …
… The Google Secure AI Framework highlights these six elements: expand strong security foundations to the AI ecosystem extend detection and response to bring AI into an organization’s threat universe automate defenses to keep pace with existing and new threats harmonize platform-level controls to ens… …
… More to explore Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Security Manage CI/CD credentials with GitLab Secrets Manager Start building faster today See what your team can do with the intelligent orchestr… …
… More to explore Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Security Manage CI/CD credentials with GitLab Secrets Manager Start building faster today See what your team can do with the intelligent orchestr… …
… Vulnerability scanning stops code releases that contain security risks, enabling institutions to establish and enforce governance protocols that protect sensitive information. …
… More to explore Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Security Manage CI/CD credentials with GitLab Secrets Manager Start building faster today See what your team can do with the intelligent orchestr… …
… Learn more Immune system: Agents for security and governance for agents In the agentic era, the security and compliance exposure every team manages keeps multiplying. …
… GitLab 19.0 released More AI models for GitLab Duo Agent Platform Self-Hosted Manage CI/CD credentials with GitLab Secrets Manager Track CI component usage across your organization Reduce supply chain risk with SBOM-based dependency scanning Full security scanner coverage of your codebase in minute… …
… Below are perspectives from: Jane Gianoutsos , Manager, Support Engineering Michelle Hodges , VP of Global Channels Taharah Nix , Associate Paralegal, Employment Sherrod Patching , Senior Director, Technical Account Manager Juliet Wanjohi , Senior Security Engineer, Security Automation What advice … …
… Rewriting most of it is too risky and too expensive to justify. …