OWASP Top 10 scanning

How Snyk API & Web scans for the OWASP Top 10

Snyk API & Web can scan for the 2021 and 2025 Open Web Application Security Project (OWASP) Top 10, searching for a wide range of vulnerabilities that belong to the different OWASP Top 10 categories.

Generate OWASP Top 10 reports

After the target scan, you can generate a target scan report for OWASP Top 10. The report includes a table indicating which areas of the Top 10 Snyk tested and which ones passed.

Visit Types of target scan reports you can generate with Snyk API & Web for more information about generating reports.

Scan profiles and OWASP Top 10

All built-in scan profiles check for the Top 10 vulnerabilities, except for the Lightning scan profile.

Visit Built-in scan profiles and their differences for more information about scan profiles.