According to OWASP, it is a nonprofit foundation that works to improve the
security of software.
provides standard Top 10 security risk documentation which tells
most critical web application security risks.
ensure that the companies adopt and defend from the security risks.
if you are reporting any
bugs to a company they will consider this document for vulnerability scope.