// GLOSSARY

OWASP LLM Top 10

A list, compiled by OWASP, of the ten most critical security risks in generative-AI and large language model (LLM) applications. It covers headings such as direct and indirect prompt injection, sensitive-information disclosure, supply-chain weakness, excessive agent autonomy and insecure output handling. It is the framework reference of Generative AI Red Team reporting. Its function is to set a common priority language in a threat area that is still very new and fast-changing; this is especially valuable in AI security because the field met a huge adoption pace before gaining technical maturity. When an organization takes an AI application to production, it often has no systematic answer to 'what should I watch for'; the OWASP LLM Top 10 fills this gap and takes a finding out of being 'an interesting problem' and settles it into a recognized, documented risk category with countermeasures already discussed. What the OWASP Top 10 is for traditional web, this list is for LLM applications; together with MITRE ATLAS it is used to frame abuse-path steps.