OWASP Quiz

Quick refresher: here are the OWASP Top 10 categories for 2025:

• A01: Broken Access Control – Users can do things they shouldn't be allowed to do.
• A02: Security Misconfiguration – The system is deployed or configured in an unsafe way.
• A03: Software Supply Chain Failures – Vulnerabilities enter through outdated or compromised third-party libraries or build tools.
• A04: Cryptographic Failures – Sensitive data is exposed because cryptographic protections are missing or misused.
• A05: Injection – Untrusted input is treated as executable instructions.
• A06: Insecure Design – The system's design lacks the controls needed to resist attacks.
• A07: Authentication Failures – The system doesn't reliably verify who a user is.
• A08: Software or Data Integrity Failures – The application trusts software or data without verifying its integrity.
• A09: Security Logging and Alerting Failures – Attacks happen without triggering the records or alerts needed for a response.
• A10: Mishandling of Exceptional Conditions – Unexpected conditions expose details, bypass controls, or leave the system in a bad state.