OWASP top 10 Here are top 10 web security threats highlighted by OWASP or Open Web Application Security Project https://www.owasp.org/index.php/Top_10_2013-Top_10