OWASP Top 10 updates

Question

Has the OWASP top 10 project not been updated since 2010?

Having had a look at the following site on OWASP I can see that this may be the case: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project

My company is making a big deal out of OWASP compliance, so I just want to be sure that I'm up to date?

Answer 1

Update -- OWASP Top Ten 2017 was released. You can always find the latest version here. https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project

OWASP Top Ten 2013 was released today! You can download here http://owasptop10.googlecode.com/files/OWASP%20Top%2010%20-%202013%20-%20RC1.pdf

Answer 2

AFAIK - there is a 2013 update in progress.

Contact Dave Wichers for more info, or better yet, volunteer on the topten mail list. :)

Answer 3

Yes, the 2010 version of the OWASP Top Ten is the latest version. Before that, the last version was in 2007. If more people volunteered, it would get updated more often, but most of us who work on OWASP projects also hold down full-time day jobs, so progress can be frustratingly slow at times.