OWASP LLM Top 10
OWASP's enumeration of the top security risks specific to LLM applications, including prompt injection, insecure output handling, training-data poisoning, model DoS, supply-chain vulnerabilities, and more. Reference checklist for LLM application security programs.
Related terms
- Prompt Injection
An attack where adversarial instructions embedded in untrusted content (user input, retrieved documents, tool responses) hijack the model into ignoring its original instructions. Considered the primary security risk for LLM applications; defenses include separation of channels and output validation.
- Red-Teaming
Structured adversarial testing of an AI system, either manually or via automated attack pipelines, to find prompt injection, jailbreak, harmful-output, and misuse vulnerabilities before release. Increasingly required by AI regulation for high-risk systems.
Related on this site
Where this fits
OWASP LLM Top 10 is part of the Evaluation & Governance vocabulary used in the Generative AI Maturity Framework. See the full glossary for the complete set of 149 defined terms, or take the free maturity assessment to see where your organisation stands.