The BOLA (Broken Object Level Authorization) red teaming plugin is designed to test an AI system's vulnerability to attacks that attempt to access or modify resources belonging to other users or outside the authorized scope (OWASP API 1).| www.promptfoo.dev
OWASP replaced DoS attacks with "unbounded consumption" in their 2025 Top 10. Learn why this broader threat category matters and how to defend against it.| www.promptfoo.dev