We have the following two tags:

Questions tagged with one or both of these falls in a number of categories:

  1. They are about OWASP products, e.g. Zap.
  2. They are about the practices of the OWASP organization itself, e.g. criteria for the top ten list.
  3. They are about an issue included on the top ten list, such as XSS.
  4. The OP came across some OWASP resource while doing research for the question.

To me, #1 and #2 looks like legit reasons to tag but #3 and #4 do not. If they were, every single webapp question could be tagged with .

So I'd suggest we do something about this tag misuse. Removing the tags where they do not belong would be a start. Perhaps they should also be merged into one? Or what do you think?

  • 1
    I may have done a couple just now... :-)
    – Rory Alsop Mod
    Commented Feb 26, 2018 at 16:57

2 Answers 2


I think they have to remain separate tags - the OWASP Top Ten is simply one (probably the most well known) of the OWASP activities.

But I agree with you that your cases #3 and #4 would be better off with the tag removed.

As usual, please don't do all at once or a huge number of questions will get bumped to the front page :-)

  • agreed, separate tags, but nix #3 and #4
    – schroeder Mod
    Commented Feb 26, 2018 at 14:04
  • Ok, will take it easy with the tag removal.
    – Anders
    Commented Feb 26, 2018 at 14:10

A status update on the progress:

  • has been cleaned up and is down from 57 to 22 questions.
  • has been reduced from 142 to 84 questions. All but 34 are now also tagged with whatever OWASP technology they are about, e.g. ZAP. There is probably still some cleaning that could be done, but the worst is fixed now. I'm calling it a day.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .