OWASP Top 10:2025 · pillar 5 of 6
Integrity and operations
The categories about what happens after the code is right.
- 13 A08: integrity, one level below the supply chain Software or Data Integrity Failures stays at #8. It is about failing to maintain trust boundaries and verify the…
- 14 A09: logging without alerting is worth little Security Logging and Alerting Failures holds #9, renamed from Logging and Monitoring Failures to stress the alerting…
- 15 What is absent from the data is not absent from reality Some categories are hard to test at scale, so they are underrepresented in the contributed data regardless of how…
Start this pillar See the whole map
Read against OWASP Top 10:2025 on . Regulations and frameworks change; the date is there so you can tell whether this has kept up.
The OWASP Top 10:2025 is © 2021-2025 the OWASP Top 10 Team and is licensed under a Creative Commons Attribution 3.0 Unported Licence. These cards are independent commentary written in our own words. ytyk.org is not affiliated with or endorsed by the OWASP Foundation.