[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-571458-105":3,"detail-sidebar-cat-1-en-105":81,"doc-detail-571458-en":127},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","owasp-top-10-2013-about-owasp","OWASP Top 10 2013 - About OWASP","","OWASP Top 10 2013 explains why insecure software threatens critical financial, healthcare, defense, and energy infrastructure as digital systems become more complex and interconnected. It sets the Top 10’s purpose: raising awareness of the most critical application security risks and pointing organizations to widely referenced resources. It also introduces OWASP as an open, volunteer-driven community, offering free tools, standards, books, chapters, research, and conferences, and encourages building an application security program aligned with organizational culture and technology.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/general/","General",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/owasp-top-10-2013-about-owasp/571458/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/owasp-top-10-2013-about-owasp/571458.png","ImageObject",442,249,{"name":42,"@type":43},"Aldword","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-22","2026-10-13",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",6,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What is the purpose of the OWASP Top 10 project?","Question",{"text":63,"@type":64},"To raise awareness about the most critical application security risks organizations face, and to educate stakeholders on the consequences of important web application security weaknesses.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"How is the OWASP Top 10 for 2013 selected and prioritized?",{"text":68,"@type":64},"It is based on multiple datasets across application security firms and prioritized using prevalence data together with consensus estimates of exploitability, detectability, and impact.",{"name":70,"@type":61,"acceptedAnswer":71},"Why does OWASP encourage organizations to build an application security program?",{"text":72,"@type":64},"Because the approach must fit an organization’s existing strengths and be compatible with its culture and technology, rather than trying to do everything from a single process model.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},571458,1792124523,{"code":4,"msg":82,"data":83},"success",[84,89,94,99,104,109,114,119,124],{"id":85,"doc_module":22,"doc_module_name":25,"category_name":86,"show_sort_weight":87,"slug":88},11,"Presentations",90,"presentations",{"id":90,"doc_module":22,"doc_module_name":25,"category_name":91,"show_sort_weight":92,"slug":93},12,"Resumes",80,"resumes",{"id":95,"doc_module":22,"doc_module_name":25,"category_name":96,"show_sort_weight":97,"slug":98},14,"Invoices",70,"invoices",{"id":100,"doc_module":22,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},15,"Posters",60,"posters",{"id":105,"doc_module":22,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},16,"Social Media",50,"social-media",{"id":110,"doc_module":22,"doc_module_name":25,"category_name":111,"show_sort_weight":112,"slug":113},17,"Forms",40,"forms",{"id":115,"doc_module":22,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},18,"Letters",30,"letters",{"id":120,"doc_module":22,"doc_module_name":25,"category_name":121,"show_sort_weight":122,"slug":123},21,"Paper Templates",5,"papers-templates",{"id":125,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":4,"slug":126},158,"general-158",{"code":4,"msg":82,"data":128},{"doc_id":79,"user_id":129,"nickname":42,"user_avatar":130,"doc_module":22,"category_id":125,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":136,"language":137,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":12,"update_tm":141,"read_time":142},2336478940917,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","O About OWASP  \n| Foreword |\n| --- |\n| Insecure software is undermining our financial, healthcare, defense, energy, and other critical infrastructure. As our digital infrastructure gets increasingly complex and interconnected, the difficulty of achieving application security increases exponentially. We can no longer afford to tolerate relatively simple security problems like those presented in this OWASP Top 10.\u003Cbr>The goal of the Top 10 project is to raise awareness about application security by identifying some of the most critical risks facing organizations. The Top 10 project is referenced by many standards, books, tools, and organizations, including MITRE, PCI DSS, DISA, FTC, and many more. This release of the OWASP Top 10 marks this project’s tenth anniversary of raising awareness of the importance of application security risks. The OWASP Top 10 was first released in 2003, with minor updates in 2004 and 2007. The 2010 version was revamped to prioritize by risk, not just prevalence. This 2013 edition follows the same approach.\u003Cbr>We encourage you to use the Top 10 to get your organization started with application security. Developers can learn from the mistakes of other organizations. Executives should start thinking about how to manage the risk that software applications create in their enterprise.\u003Cbr>In the long term, we encourage you to create an application security program that is compatible with your culture and technology. These programs come in all shapes and sizes, and you should avoid attempting to do everything prescribed by some process model. Instead, leverage your organization’s existing strengths to do and measure what works for you.\u003Cbr>We hope that the OWASP Top 10 is useful to your application security efforts. Please don’t hesitate to contact OWASP with your questions, comments, and ideas, either publicly to[owasp-topten@lists.owasp.org](owasp-topten@lists.owasp.org) or privately to [dave.wichers@owasp.org](dave.wichers@owasp.org). |\n\n\n| About OWASP |\n| --- |\n| The Open Web Application Security Project (OWASP) is an open community dedicated to enabling organizations to develop, purchase, and maintain applications that can be trusted. At OWASP you’ll find free and open …\u003Cbr>• Application security tools and standards\u003Cbr>• Complete books on application security testing, secure code development, and secure code review\u003Cbr>• Standard security controls and libraries\u003Cbr>• Local chapters worldwide\u003Cbr>• Cutting edge research\u003Cbr>• Extensive conferences worldwide\u003Cbr>• Mailing lists\u003Cbr>Learn more at: [https://www.owasp.org](https://www.owasp.org)\u003Cbr>All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security. We advocate approaching application security as a people, process, and technology problem, because the most effective approaches to application security require improvements in all of these areas.\u003Cbr>OWASP is a new kind of organization. Our freedom from commercial pressures allows us to provide unbiased, practical, cost-effective information about application security. OWASP is not affiliated with any technology company, although we support the informed use of commercial security technology. Similar to many open source software projects, OWASP produces many types of materials in a collaborative, open way.\u003Cbr>The OWASP Foundation is the non-profit entity that ensures the project’s long-term success. Almost everyone associated with OWASP is a volunteer, including the OWASP Board, Global Committees, Chapter Leaders, Project Leaders, and project members. We support innovative security research with grants and infrastructure.\u003Cbr>Come join us! |\n\n\n| Copyright and License |  |\n| --- | --- |\n| | Copyright © 2003 – 2013 The OWASP Foundation\u003Cbr>This document is released under the Creative Commons Attribution ShareAlike 3.0 license. For any reuse or distribution, you must make it clear to others the license terms of this work. |\n\nI Introduction  \n| Welcom","cbCaieodHM9rEM6k","https://ap.wps.com/l/cbCaieodHM9rEM6k","pdf",1160855,22,"English","# About OWASP\n## Foreword\n## About OWASP\n## Copyright and License\n# Introduction\n## Welcome\n## Warnings","[{\"question\":\"What is the purpose of the OWASP Top 10 project?\",\"answer\":\"To raise awareness about the most critical application security risks organizations face, and to educate stakeholders on the consequences of important web application security weaknesses.\"},{\"question\":\"How is the OWASP Top 10 for 2013 selected and prioritized?\",\"answer\":\"It is based on multiple datasets across application security firms and prioritized using prevalence data together with consensus estimates of exploitability, detectability, and impact.\"},{\"question\":\"Why does OWASP encourage organizations to build an application security program?\",\"answer\":\"Because the approach must fit an organization’s existing strengths and be compatible with its culture and technology, rather than trying to do everything from a single process model.\"}]","OWASP Top 10 2013 - About OWASP | PDF",1791918762,8]