OWASP
A nonprofit that publishes the security industry's most-cited lists of software risks, including one for AI applications.
OWASP, the Open Worldwide Application Security Project, is a nonprofit that has been publishing free security guidance since 2001. Its Top 10 list of web application risks is the closest thing the industry has to a shared checklist, referenced in audits, contracts and training almost everywhere.
Since 2023 it has maintained a separate Top 10 for applications built on large language models. Prompt injection has held the number one slot, catalogued as LLM01, from the very first edition and has not moved since, which tells you how unsolved it remains. If you build anything with AI, that list is a useful sanity check, and if you read security coverage, an “LLM01” reference is simply shorthand for prompt injection.