https://samarthya.me/tags/appsec/Recent content in Appsec on SamarthyaHugo -- gohugo.ioen© Samarthya 2018-2026. All rights reserved.Tue, 20 Oct 2026 19:30:00 -0400https://samarthya.me/posts/owasp-top-10-2025-explained/Tue, 20 Oct 2026 19:30:00 -0400https://samarthya.me/posts/owasp-top-10-2025-explained/<div class="lead text-neutral-500 dark:text-neutral-400 !mb-9 text-xl"> A pilot&rsquo;s checklist does not list every way a plane can fail. It lists the few that keep happening, in the order that matters. The OWASP Top 10 is that checklist for web applications. </div> <p>When a scanner says a finding is &ldquo;A05&rdquo; or a security review mentions &ldquo;Top 10 coverage&rdquo;, this is the list they mean. This post is a quick introduction: what the list is, what changed in 2025, why each category matters, and a cheat card for each one.</p>