The shift from 2021 (the last time the list came out) to 2025 represents more than minor adjustments, it's a fundamental shift in application security. Two entirely new categories entered the list and one category was consolidated into another, which highlights emerging risks that traditional testing often misses. These additions and shifts can be seen in the chart below:
OWASP Top 10 2025: What's changed and why it matters… Comprehensive native security and compliance capabilities GitLab's comprehensive security and compliance capabilities, built into the DevSecOps platform, provide superior control and protection throughout the entire software development lifecycle, helping government organizations address critical s… …
… More to explore Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Security Manage CI/CD credentials with GitLab Secrets Manager Start building faster today See what your team can do with the intelligent orchestr… …
… And security still needs to be embedded in the way we work. At GitLab, that’s exactly what we’ve done. As a developer platform, we’re not bolting security onto the workflow — we’re embedding it directly where developers already work: in the IDE, in merge requests, and in the pipeline. …
… Manage CI/CD credentials with GitLab Secrets Manager Transform MRs from manual tasks to an automated workflow Track CI component usage across your organization More AI models for GitLab Duo Agent Platform Self-Hosted Full security scanner coverage of your codebase in minutes More to explore Securit… …
… More to explore Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Security Manage CI/CD credentials with GitLab Secrets Manager Start building faster today See what your team can do with the intelligent orchestr… …
… More to explore Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Security Manage CI/CD credentials with GitLab Secrets Manager Start building faster today See what your team can do with the intelligent orchestr… …
… Analyze security scan results Complexity : Intermediate Category : Security Agent : Duo Security Analyst Prompt from library : @security analyst Analyze these security scan results: PASTE SCAN OUTPUT For each finding: 1. Assess real risk vs false positive 2. …
… GitLab 19.0 released More AI models for GitLab Duo Agent Platform Self-Hosted Transform MRs from manual tasks to an automated workflow Track CI component usage across your organization Reduce supply chain risk with SBOM-based dependency scanning Full security scanner coverage of your codebase in mi… …
… GitLab 19.0 released More AI models for GitLab Duo Agent Platform Self-Hosted Manage CI/CD credentials with GitLab Secrets Manager Transform MRs from manual tasks to an automated workflow Reduce supply chain risk with SBOM-based dependency scanning Full security scanner coverage of your codebase in… …
… Vulnerability Explanation: Quickly understand security risks We know that developers are playing an even greater role in the remediation of security vulnerabilities . …