A09:2025 — Security Logging and Monitoring Failures
Verified by Precogs Threat Research
What are Logging and Monitoring Failures (OWASP A09:2025)?
Insufficient logging, detection, monitoring, and active response. Without these, breaches cannot be detected in a timely manner. Most breach studies show time to detect exceeds 200 days.
Impact
Mean time to detect a breach is 212 days (IBM). Without proper logging, attackers maintain persistence indefinitely. Compliance frameworks (PCI-DSS, HIPAA) mandate audit logging.
How Precogs AI Addresses A09
Precogs AI identifies missing security logging in application code and detects PII/secrets inadvertently included in existing log statements.