The OWASP TOP 10 list is updated every few years, and lessons have been available for OWASP Top 10 2021 since June 2022. To prevent redundancy and allocate resources more efficiently, all the OWASP TOP 10 2017 modules and lessons will be deprecated. 

What Should You Do? 

• Beginning today, do not assign OWASP 2017 lessons to any campaigns  

• Ask learners to complete any active lessons before November 10th, 2023  

• Start the transition and assign the OWASP 2021 lessons 

Timing:  

• October 5th, 2023: 'DEPRECATED’ will display next to the names of modules and lessons 

• November 15th, 2023: the ‘Admin’ and ‘Manager’ role users won’t be able to select and assign OWASP 2017 module/lessons in any new campaigns, while learners are still able to access the lessons and complete the lessons 

• December 15th, 2023: The OWASP 2017 modules and lessons will be unavailable to all users, but historical records will remain on all reports for compliance and audit purposes