API for the "2025 OWASP Top 10 for LLMs" challenge

Start Date: May 7, 2026 at 12:00 AM EDT
End Date: May 9, 2026 at 12:00 AM EDT

Note: Prizes can only be awarded to participants in the following currencies and regions:

AUD: Australia
BRL: Brazil
CAD: Canada
EUR: Austria, Belgium, France, Germany, Ireland, Italy, Netherlands, Portugal, Spain
GBP: United Kingdom
INR: India
NZD: New Zealand
USD: United States of America


Terms and Conditions: https://bit.ly/dsc25tandcs
Support: https://bit.ly/devseccongg

Instructions:

1. Retrieve challenge data

GET /api/owasp-ordering

response:

{
    "items": "Array of strings (out-of-order OWASP Top 10 for LLM titles)",
    "token": "String (fast-expiring token for submission)"
}

example:

curl https://wc-dry-run.snykchallenge.io/api/owasp-ordering
{
    "items": ["FOUR", "TWO", "ONE", "THREE"],
    "token": "abc123"
}

2. Submit your solution, including an array of integers indicating the positions of the items in the correct order

POST /api/owasp-ordering

body:

{
    "orderedList": "Array of integers: orderedList[i] = shuffled position that has the item for correct position i",
    "token": "String (token from GET response)"
}

response:

{
    "completionId": "0000-1111-2222-3333-4444",
    "completionToken": "def456",
    "messages": [
        "Congrats! You have successfully ordered the OWASP Top 10 for LLMs.",
        "Next Steps: ..."
    ],
    "success": true
}

example:

curl -X POST https://wc-dry-run.snykchallenge.io/api/owasp-ordering \
    -H "Content-Type: application/json" \
    -d '{"orderedList": [2, 1, 3, 0], "token": "abc123"}'

NOTE:

- you only have 3000 millis between the GET and POST requests
- Given the time constraints, you're going to have to write some code to solve this challenge. Maybe AI can help?


The challenge has a total of 10 prizes. 0 prizes have been claimed. There are 10 prizes remaining.