OWASP Top 10 is a well-known overview of important categories of web application flaws. It is not a complete audit, but it helps focus attention on areas such as access control, loginThe information used to log in to a service, usually username, email, password, code, or security ke... More, inputs, configuration, and data leaks.
Why it matters: It is a useful shared language between developer, customer, and security tester.
