OWASP LLM Top 10 Checker
Assess an LLM application against the OWASP Top 10 for LLM Applications 2025. Mark each control as addressed, partial, not addressed or N/A; get a per-category status, a documented readiness score and an exportable gap report.
How to use this & how the score is computed
- Pick a category tab (LLM01–LLM10). Each lists the official OWASP risk, concrete assessment questions and the official prevention items.
- Answer each question with one state: Addressed, Partial, Not addressed or N/A (not applicable to your app). Leave it blank if you have not assessed it yet.
- Add notes / evidence per question if you want (kept with your saved progress only).
- Open Gap report to see every control that is not fully addressed, then export to JSON, CSV or Markdown.
Scoring (no black box).
Each answered, in-scope question is weighted: Addressed = 1, Partial = 0.5, Not addressed = 0.
N/A and unanswered questions are excluded from the score.
Category score = round(sum of weights / number of in-scope answered × 100).
The overall score pools every in-scope answered question across the ten categories (so each question counts equally), and the coverage figure shows how much of the applicable checklist you have actually answered. A mostly-blank assessment therefore shows a low coverage and a not assessed status — never a fake pass.
Category status: Addressed ≥ 80%, Partial 50–79%, Not addressed < 50%, plus explicit Not applicable (all N/A) and Not assessed (nothing answered). Grade: A≥90, B≥75, C≥60, D≥40, F<40.
This is a self-assessment aid, not a certification or a guarantee of security. It reflects only the states you select. Source of truth: the official OWASP Top 10 for LLM Applications 2025.