LLM Security Guidelines (OWASP Top 10 for LLM 2025)

Comprehensive security rules for building secure LLM applications. Based on the OWASP Top 10 for Large Language Model Applications 2025 - the authoritative guide to LLM security risks.

How It Works

1. When building or reviewing LLM applications, reference these security guidelines
2. Each rule includes vulnerable patterns and secure implementations
3. Rules cover the complete LLM application lifecycle: training, deployment, and inference

Categories

Critical Impact

• LLM01: Prompt Injection - Prevent direct and indirect prompt manipulation
• LLM02: Sensitive Information Disclosure - Protect PII, credentials, and proprietary data
• LLM03: Supply Chain - Secure model sources, training data, and dependencies
• LLM04: Data and Model Poisoning - Prevent training data manipulation and backdoors
• LLM05: Improper Output Handling - Sanitize LLM outputs before downstream use