OWASPASVS 5.0 requirement

ASVS-V2.4.1 Anti-automation controls are in place to protect against excessive calls to application functions that could lead to data exfiltration,…

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V2 Validation and Business Logic
Section
V2.4 Anti-automation
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that anti-automation controls are in place to protect against excessive calls to application functions that could lead to data exfiltration, garbage-data creation, quota exhaustion, rate-limit breaches, denial-of-service, or overuse of costly resources.