EN
Sign inGet started
Glossary

OWASP LLM Top 10

What is OWASP LLM Top 10?

The OWASP Top 10 for LLM Applications is a list of the most important security risks in applications built on large language models, published by the OWASP GenAI Security Project. The current 2026 edition appeared in August 2026 (as of October 2026) and covers: prompt injection, sensitive information disclosure, excessive agency, supply chain, data and model poisoning, unbounded consumption, misinformation, hidden context exposure, vector and embedding weaknesses, and improper output handling. It serves as a checklist for development and audits.

How KI.ordo helps

KI.ordo’s “Chatbot security audit” template assesses an agent’s instructions and sample conversations against the risk areas of the OWASP Top 10 for LLM Applications.

Learn more →: OWASP LLM Top 10

Matching templates

Topics

  • security
  • standard
  • audit

Try KI.ordo

Agents, flows and templates in one workspace – free 24-hour demo.

Start demo
← All terms

Related terms

LLM security

LLM security covers all measures that protect applications built on large language models from misuse, data leakage and unwanted behaviour. Typical risks include prompt injection, disclosure of confidential instructions or data, and agents with excessive permissions. Protection comes from several layers: clear instructions, restricted rights, checks on inputs and outputs, AI firewalls, red teaming and regular audits.

  • security
  • language models
  • +1
Template

Indirect Prompt Injection

In an indirect prompt injection, manipulative instructions are not in the user's input but hidden in content an AI system processes along the way, such as web pages, emails or documents. When an agent reads such content, it may mistake hidden commands for genuine tasks and, for example, disclose data. Safeguards include treating external content strictly as data, limiting permissions, screening inputs and requiring human approval for critical actions.

  • Security
  • Prompt injection
  • +1
Template

Chatbot security audit

A chatbot security audit is a structured review of whether an AI chatbot adequately protects confidential data, its internal instructions and its permissions to act. It examines, among other things, susceptibility to prompt injection, unintended disclosure of information and overly broad access to tools – often following the OWASP Top 10 for LLM Applications. The result is a report with a rating per risk area and concrete measures.

  • security
  • audit
  • +1
Template

Prompt leaking

Prompt leaking refers to the unintended disclosure of an AI system's internal instructions, for instance when a chatbot reveals its system prompt in response to a cleverly worded request. This becomes a problem if those instructions contain business logic, internal information or even credentials. The OWASP list for LLM applications names this risk explicitly. The most effective safeguard is to write instructions as if they could become public, never store secrets in them and check outputs as well.

  • AI security
  • system prompt
  • +1
Template