Similar to the web application top 10, OWASP API Top-10 is the prioritized list of vulnerabilities targeting APIs. The API Top 10 brings attention to the common flaws seen in APIs that aren’t necessarily present in traditional web applications. If your application uses APIs, review the API Top 10 as you build them.