11 lessons · OWASP LLM Top 10

The security mistakes AI writes into LLM apps.

One lesson per mistake: what is wrong, how someone would use it against you, how to spot it, and a prompt to fix it.

Lessons

Someone else gives your model orders

User text is mixed into the model's instructionserrorWhoever types into your app can rewrite the rules your model follows.
Retrieved documents are treated as instructionserrorWhoever wrote a document your app retrieves can give orders to your model.
The request body goes to the model uncheckedwarningAnything a client sends, of any shape or size, lands in your model call.

The model's output is trusted

Secrets leak

Too much power, or too much cost