MITRE ATT&CK VS OWASP LLM Top 10
As of 4 November 2026, OWASP LLM Top 10 is named by 102 companies and MITRE ATT&CK by 1,399; MITRE ATT&CK skews to companies under 200 people (28% vs 20%), OWASP LLM Top 10 to companies over 1,000 (52% vs 45%).
As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.
The website-and-DNS footprint is not comparable between a marketing suite and a CRM: MITRE ATT&CK's script and mail records show on hundreds of thousands of small sites, OWASP LLM Top 10 rarely leaves a trace outside its own apps. Compare on the job-posting numbers; use the footprint for reach.
- MITRE ATT&CK: 2–200 employees
- 28%
- OWASP LLM Top 10: 2–200 employees
- 20%
- MITRE ATT&CK: 1,000+ employees
- 45%
- OWASP LLM Top 10: 1,000+ employees
- 52%
- Postings per company, 90 days
- 2.6 · 2.1
- Website or DNS footprint
- 0 · 0
Who chooses which
Share of each tool's companies in every segment. "Leans" marks a gap of more than two points.
| Segment | MITRE ATT&CK | share | OWASP LLM Top 10 | share | Leans |
|---|---|---|---|---|---|
| Self-employed | 35 | 3% | 5 | 5% | OWASP LLM Top 10 |
| 2-10 employees | 74 | 5% | 7 | 7% | even |
| 11-50 employees | 133 | 10% | 5 | 5% | MITRE ATT&CK |
| 51-200 employees | 178 | 13% | 8 | 8% | MITRE ATT&CK |
| 201-500 employees | 199 | 14% | 12 | 12% | MITRE ATT&CK |
| 501-1000 employees | 157 | 11% | 12 | 12% | even |
| 1001-5000 employees | 296 | 21% | 31 | 30% | OWASP LLM Top 10 |
| 5001-10000 employees | 94 | 7% | 5 | 5% | even |
| 10,001+ employees | 233 | 17% | 17 | 17% | even |
| Segment | MITRE ATT&CK | share | OWASP LLM Top 10 | share | Leans |
|---|---|---|---|---|---|
| Technology & software | 606 | 43% | 45 | 44% | even |
| Business & finance services | 340 | 24% | 28 | 27% | OWASP LLM Top 10 |
| Manufacturing & industry | 130 | 9% | 6 | 6% | MITRE ATT&CK |
| Utilities & infrastructure | 61 | 4% | 6 | 6% | even |
| Consumer services & leisure | 51 | 4% | 3 | 3% | even |
| Media & content | 44 | 3% | 4 | 4% | even |
| Commerce & trade | 41 | 3% | 2 | 2% | even |
| Public, community & associations | 35 | 3% | 2 | 2% | even |
| Transport, logistics & rental | 22 | 2% | – | – | outside top 12 |
| Automotive | 20 | 1% | – | – | outside top 12 |
| Health care | 17 | 1% | 2 | 2% | even |
| Property & construction | 17 | 1% | 2 | 2% | even |
| Agriculture & forestry | – | – | 1 | 1% | outside top 12 |
| Hospitality & travel | – | – | 1 | 1% | outside top 12 |
| Segment | MITRE ATT&CK | share | OWASP LLM Top 10 | share | Leans |
|---|---|---|---|---|---|
| United States | 815 | 58% | 71 | 70% | OWASP LLM Top 10 |
| United Kingdom | 116 | 8% | 9 | 9% | even |
| Germany | 48 | 3% | 2 | 2% | even |
| Canada | 36 | 3% | 1 | 1% | even |
| France | 34 | 2% | 1 | 1% | even |
| Brazil | 29 | 2% | 1 | 1% | even |
| India | 29 | 2% | – | – | outside top 12 |
| Australia | 27 | 2% | 1 | 1% | even |
| Italy | 20 | 1% | – | – | outside top 12 |
| Singapore | 18 | 1% | 2 | 2% | even |
| Netherlands | 16 | 1% | – | – | outside top 12 |
| Spain | 15 | 1% | – | – | outside top 12 |
| Portugal | – | – | 3 | 3% | outside top 12 |
| MY | – | – | 2 | 2% | outside top 12 |
| United Arab Emirates | – | – | 1 | 1% | outside top 12 |
| Cyprus | – | – | 1 | 1% | outside top 12 |
| Segment | MITRE ATT&CK | share | OWASP LLM Top 10 | share | Leans |
|---|---|---|---|---|---|
| IT operations & business systems | 3,407 | 78% | 160 | 63% | MITRE ATT&CK |
| Sales | 81 | 2% | 2 | 1% | even |
| Software engineering | 70 | 2% | 17 | 7% | OWASP LLM Top 10 |
| Data & AI | 58 | 1% | 41 | 16% | OWASP LLM Top 10 |
| Product, program & project management | 53 | 1% | – | – | outside top 12 |
| Legal, compliance & risk | 37 | 1% | 2 | 1% | even |
| Customer service & success | 33 | 1% | – | – | outside top 12 |
| Engineering (non-software) | 28 | 1% | – | – | outside top 12 |
| Public safety and protective services | 24 | 1% | – | – | outside top 12 |
| Education & training | 23 | 1% | – | – | outside top 12 |
| Facilities cleaning and security | 22 | 1% | – | – | outside top 12 |
| Finance & accounting | 8 | 0% | – | – | outside top 12 |
| General management & consulting | 7 | 0% | 2 | 1% | even |
| Marketing & communications | 5 | 0% | – | – | outside top 12 |
| Business development & strategy | 3 | 0% | – | – | outside top 12 |
| Skilled trades and field service | 3 | 0% | – | – | outside top 12 |
| Unclassified | 3 | 0% | – | – | outside top 12 |
| Design & UX | 2 | 0% | – | – | outside top 12 |
| Quality, safety & environment | 2 | 0% | 1 | 0% | even |
The companies behind each column
Companies using MITRE ATT&CK →
Companies using OWASP LLM Top 10 →
compliance frameworks standards ranked →
Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.
OWASP LLM Top 10 is named by 102 companies in job postings and MITRE ATT&CK by 1,399; 0 name both. (Breaknorm, 4 November 2026, https://breaknorm.co/compare/mitre-attack-vs-owasp-llm-top-10)
Read from the source, not self-reported
Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →
- Job postingsRead hourly from career sites. A tool counts when the employer's own text names it as the team's system; both tools can count for one company.
- Website and DNSScripts and embeds on the company's pages, plus SPF, DKIM, MX and CNAME records of its domain that point at the vendor.
- SegmentsCountry, size and industry from the company profile built from its website.
- Not a reviewNo ratings, prices or feature claims. For those, read the vendors.
MITRE ATT&CK vs OWASP LLM Top 10: questions
Which is more used, MITRE ATT&CK or OWASP LLM Top 10?
By companies naming it in their own job postings, MITRE ATT&CK (1,399) over OWASP LLM Top 10 (102). By website-and-DNS footprint, OWASP LLM Top 10 (0 vs 0), because its scripts and mail records sit on many small company sites.
Who chooses MITRE ATT&CK?
28% of MITRE ATT&CK companies have 2 to 200 employees, against 20% for OWASP LLM Top 10. 45% of MITRE ATT&CK companies have over 1,000 employees, against 52% for OWASP LLM Top 10.
Do companies run both?
0 companies name both in their postings, usually MITRE ATT&CK in marketing and OWASP LLM Top 10 in sales, or during a migration.
Where do these numbers come from?
From the employer's own text in job postings read hourly from career sites, and from scripts found on company websites in our crawl. No vendor data, no surveys.
Get either list your way
The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.
Every company on either tool,
with the person who owns it
Filter on MITRE ATT&CK or OWASP LLM Top 10. Start free, no card.