# OWASP Top Ten AppvanceIQ performs vulnerability testing according to the OWASP Top Ten. For more information see [OWASP Top Ten.](https://owasp.org/www-project-top-ten/) "The OWASP Top Ten is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web applications." - The OWASP Foundation --- Last updated: October 15, 2026 If you have any feedback on this topic, please contact us at ## Using OWASP Top Ten results Treat the OWASP Top Ten as a risk-awareness taxonomy for organizing findings, not as a substitute for application-specific threat modeling. Run scans only within written scope, preserve the affected request and response evidence, and have the application owner validate severity and remediation.