A shared vocabulary, maintained by a nonprofit

OWASP is a nonprofit that publishes free security resources. Its Top 10 is a periodically updated list of the most critical categories of web application risk.

It matters less as a checklist and more as a shared language. When a report says A01, every security person knows what is meant. CheckVibe maps its findings to these categories for exactly that reason.