Articles
OWASP Top 10 for LLM Applications
The LLM-specific sibling to the general OWASP Top 10, and the risks it names, prompt injection sitting at number one, plus excessive agency, insecure output handling, and supply chain risk for models and training data, are the ones I now walk through on every project that wires an LLM into something with real permissions. It's a useful corrective to how much AI security discussion still focuses on model behavior in the abstract rather than the concrete ways an LLM-powered feature gets exploited in production. Pair this with the standard OWASP Top 10 rather than treating it as a replacement; most LLM apps are still full of ordinary web vulnerabilities too.