Summary
This document is a guide that outlines the OWASP Top 10 Security Risks associated with citizen development, particularly focusing on the use of Low Code No Code platforms and AI-assisted coding technologies. It describes how the rise of citizen developers has led to increased innovation but also introduced significant security and governance challenges. The guide identifies specific risks, such as blind trust, account impersonation, and sensitive data leakage, and provides concrete examples of how these risks can manifest in real-world scenarios. Additionally, it emphasizes the importance of security professionals in enabling the safe adoption of these technologies and offers structured recommendations for governance bodies to align oversight with organizational goals. The mission of the OWASP Citizen Development Top 10 Project is to assist organizations in identifying, prioritizing, and mitigating risks associated with citizen development, thereby fostering an environment where innovation can thrive while maintaining robust security practices.
