The shift from 2021 (the last time the list came out) to 2025 represents more than minor adjustments, it's a fundamental shift in application security. Two entirely new categories entered the list and one category was consolidated into another, which highlights emerging risks that traditional testing often misses. These additions and shifts can be seen in the chart below:
OWASP Top 10 2025: What's changed and why it matters… We see this need across government agencies at all levels as they work to secure hybrid cloud environments, mitigate third-party supply chain risks, address critical security gaps in aging IT systems, and defend against sophisticated ransomware and nation-state threats. …
… AI features like Duo Vulnerability Explanation and Vulnerability Resolution add another layer of speed and insight, helping developers understand risks and fix them faster, without breaking their flow. AI isn’t a shortcut to security. …
… More to explore Security Full security scanner coverage of your codebase in minutes Security Reduce supply chain risk with SBOM-based dependency scanning Security Manage CI/CD credentials with GitLab Secrets Manager Start building faster today See what your team can do with the intelligent orchestr… …
… Manage CI/CD credentials with GitLab Secrets Manager Transform MRs from manual tasks to an automated workflow Track CI component usage across your organization More AI models for GitLab Duo Agent Platform Self-Hosted Full security scanner coverage of your codebase in minutes More to explore Securit… …
… Use Security Inventory to viewing enabled security scanners and vulnerabilities. Set up prevention and maintain documentation Configure Security Policies to block merges or deployments when high-severity vulnerabilities are detected in dependencies, enforcing security standards automatically. …
… Analyze security scan results Complexity : Intermediate Category : Security Agent : Duo Security Analyst Prompt from library : @security analyst Analyze these security scan results: PASTE SCAN OUTPUT For each finding: 1. Assess real risk vs false positive 2. Explain the vulnerability 3. …
… AI is a security catalyst AI isn't just for code completion anymore. GitLab Duo has evolved to understand merge requests and provide contextual security assistance. With the new Quick Chat feature accessible via Alt+C , developers can get security insights without leaving their editor. …
… GitLab 19.0 released More AI models for GitLab Duo Agent Platform Self-Hosted Manage CI/CD credentials with GitLab Secrets Manager Transform MRs from manual tasks to an automated workflow Reduce supply chain risk with SBOM-based dependency scanning Full security scanner coverage of your codebase in… …
… Search Categories All Blogs Agile Planning AI Bulletin Board Customer Stories DevSecOps Engineering News Open Source Product Security Security Labs Recent posts AI Transform MRs from manual tasks to an automated workflow This release brings a more powerful Developer Flow, autonomous merge conflict … …
… GitLab Duo Root Cause Analysis is available as a GitLab Duo Enterprise add-on . Vulnerability Explanation: Quickly understand security risks We know that developers are playing an even greater role in the remediation of security vulnerabilities . …