What’s on the Common Web Risks poster
A 8-row table: Risk · Prevented by.
Drawn from the OWASP Top 10 categories.
- Broken access control — Server-side checks on every request
- Injection (SQL, command) — Parameterised queries, never string-building
- Cryptographic failures — TLS everywhere, no home-made crypto
- Insecure design — Threat modelling before building
- Misconfiguration — Defaults changed, debug off in production
- Vulnerable dependencies — Automated updates, a lockfile
- Auth failures — Rate limits, MFA, secure sessions
- SSRF — Allowlist outbound URLs
Injection is still near the top after twenty years, and parameterised queries have prevented it that whole time.
Questions about the Common Web Risks poster
- What’s on the Common Web Risks poster?
- A 8-row table: Risk · Prevented by. Drawn from the OWASP Top 10 categories. Broken access control — Server-side checks on every request; Injection (SQL, command) — Parameterised queries, never string-building; Cryptographic failures — TLS everywhere, no home-made crypto; Insecure design — Threat modelling before building; Misconfiguration — Defaults changed, debug off in production; Vulnerable dependencies — Automated updates, a lockfile; Auth failures — Rate limits, MFA, secure sessions; SSRF — Allowlist outbound URLs. Injection is still near the top after twenty years, and parameterised queries have prevented it that whole time.
- Who is the Common Web Risks poster for?
- Common Web Risks belongs to the Computing section rather than to a school year, because computing is not something one grade owns. Anyone learning security can pin it up — a beginner, a student mid-course, or someone revising years later.
- When should you use the Common Web Risks poster?
- Most of these are prevented by the same two habits: validate input, and never trust the client. A wall chart earns its place by being glanceable from where the work is happening, so Common Web Risks belongs on the wall where that computing work actually happens, within glancing distance, rather than filed away.
- What other posters go with Common Web Risks?
- SQL Injection, Secrets and AuthN vs AuthZ sit alongside Common Web Risks in the Computing section. Printed together they make a wall rather than a single sheet, which is how a reference set actually gets used.SQL InjectionSecretsAuthN vs AuthZ
- Is the Common Web Risks poster free to download and print?
- Yes. Common Web Risks downloads as a free PDF with no account, no email and no watermark, like everything else in the Computing section. Print as many copies as you like for a home, a classroom, a library or a tutoring group; reselling the file is the only thing the licence rules out.Read the licence
- What size does the Common Web Risks poster print at?
- Common Web Risks is a vector PDF laid out for US Letter, and prints on A4 with Fit to page — the same file, no separate download. Because every mark on it is drawn rather than photographed, it stays sharp enlarged to A3, A2 or A1 at a copy shop. Colour carries emphasis only, so a greyscale print of Common Web Risks loses nothing.Printing guide
Related posters
Charts that sit alongside Common Web Risks on the same wall.
Browse every Computing poster, or start from the full catalogue.