Skip to content

Fix risk rating doc #149

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
4ravind-b wants to merge 2 commits into
base: master
Choose a base branch
from
+2 −2
Open

Fix risk rating doc #149

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
45d8b53
docs: clarify OWASP Risk Rating and Risk Assessment Framework reference
4ravind-b Jan 23, 2026
3277d9e
docs: clarify OWASP Risk Rating and Risk Assessment Framework reference
4ravind-b Jan 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions editions/2023/en/0xd0-about-data.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,8 +37,7 @@ threats to get insights into how victims are impacted and how those threats can
be mitigated.

This effort resulted in an initial draft of what the team believes were the ten
most critical API security risks. The [OWASP Risk Rating Methodology][2] was
used to perform the risk analysis. Prevalence ratings were decided from a
most critical API security risks.The [OWASP Risk Rating Methodology][2] was used to perform the risk analysis. The OWASP Risk Rating Methodology incorporates risk assessment concepts and references the [OWASP Risk Assessment Framework][8] project, which provides guidance on assessing and prioritizing risks. Prevalence ratings were decided from a
consensus among the project team members, based on their experience in the
field. For considerations on these matters, please refer to the [API Security
Risks][3] section.
Expand Down Expand Up @@ -71,3 +70,4 @@ attention in APIs.
[5]: https://github.com/OWASP/API-Security/issues?q=is%3Aissue+label%3A2023RC
[6]: https://github.com/OWASP/API-Security/pulls?q=is%3Apr+label%3A2023RC
[7]: ./0xd1-acknowledgments.md
[8]: https://owasp.org/www-project-risk-assessment-framework/