The best known is the OWASP Top 10, the list of the ten biggest risks in web applications, which is updated every few years. There is also a list for applications built on language models, with prompt injection at the top.
We review security against OWASP's standards before anything goes live, whether the code was written by a person or an agent.
