OWASP Top 10
Also called: OWASP
A regularly updated list of the most critical security risks for web applications.
Definition
Published by the OWASP foundation, it's a common map for what to look for: broken access control, injection, security misconfiguration and more. Testers use it as a checklist of areas, not a step-by-step guide.
In practice
Your team's security checklist is organized by OWASP Top 10 categories.