April 28, 2025 - GOVERNANCE CHECKLIST · Threat Intelligence · AGENTIC APP SECURITY · Secure AI Adoption · AI Red Teaming · Data Security · BLOG · ABOUT · Mission and Charter · Governance · LEADERSHIP · INDUSTRY RECOGNITION · CONTRIBUTORS · SPONSORS · SUPPORTERS · SPONSORSHIP · NEWSROOM · CONTACT · BRANDING · GEN AI SECURITY · resources · Whitepapers/Guides · May 7, 2024 · The OWASP Top 10 for LLM Applications Cybersecurity and Governance Checklist is for leaders across executive, tech, cybersecurity, privacy, compliance, and legal areas, DevSecOps, MLSecOps, and Cybersecurity teams and defenders.

The OWASP AI Testing Guide fills this gap by establishing a practical standard for trustworthiness testing of AI systems, offering a unified, technology-agnostic methodology that evaluates not only security threats but the broader trustworthiness ...

This site is the public documentation wrapper for the main OWASP/AISVS content repository. Design. Use it as a security checklist when architecting AI systems.

December 30, 2025 - The OWASP ASI Top 10 is here. Learn the 10 biggest threats to autonomous AI agents, from Goal Hijack to Rogue Agents, and how to secure your code against the next generation of attacks.

The OWASP GenAI Security Project is an umbrella project of various initiatives that publish documents on Generative AI security, including the LLM AI Security & Governance Checklist and the LLM top 10 - featuring the most severe security risks of Large Language Models.

This cheat sheet provides best practices to secure AI agent architectures and minimize attack surfaces.

April 28, 2026 - The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the security of AI-driven applications. - OWASP/AISVS

June 15, 2026 - The 14 chapters span the full AI lifecycle: training data integrity, input validation, model lifecycle, infrastructure, access control, supply chain, model behavior, memory and vector databases, agentic orchestration, MCP security, adversarial robustness, privacy, monitoring and logging, and human oversight.

1 month ago - The State of Agentic AI Security and Governance provides a comprehensive view of today’s landscape for securing and governing autonomous AI systems. It explores the frameworks, ... The AIUC-1 Crosswalk of the OWASP Top 10 for Agentic Applications provides a bidirectional mapping between AIUC-1 requirements and the OWASP Agentic Security Initiative’s Top 10

Guidance on designing, creating, testing, and procuring secure and privacy-preserving AI systems

May 30, 2026 - An AI agent security checklist covers autonomous, tool-using, stateful systems -- not just a model that generates text. It adds controls absent from an LLM checklist: agent inventory and discovery, non-human identity and least-privilege tool ...

March 11, 2026 - This 32-page document is designed to help organizations create a strategy for implementing large language models (LLMs) and mitigate the risks associated with the use of these AI tools. Sandy Dunn, chief information security (CISO) at Quark IQ and lead author of the checklist, began work on it in August 2023 as an additional supporting resource to OWASP’s Top 10 Security Issues for LLM Applications, published in the summer of 2023.

July 31, 2025 - This complexity necessitates a ... Lau · The new OWASP LLM AI Security & Governance Checklist (PDF) is organized into 13 areas of analysis....

1 week ago - The OWASP Top 10 for Agentic Applications 2026 is the current edition, published on December 9, 2025 by the OWASP GenAI Security Project, and it uses the identifiers ASI01 through ASI10. It is a distinct release from the earlier OWASP Top 10 for LLM Applications, and the 2026 edition formalizes the agentic-skills behavior layer as a vulnerable component and the Least-Agency principle — granting an agent only the minimum autonomy its task needs. It is the version this checklist maps to.

December 10, 2025 - The OWASP Top 10 for Agentic Applications 2026 is a globally peer-reviewed framework that identifies the most critical security risks facing autonomous and agentic AI systems. Developed through extensive collaboration with more than 100 industry experts, researchers, and practitioners, the list provides practical, actionable guidance to help organizations secure AI agents that plan, act, and make decisions across complex workflows.

October 9, 2025 - This checklist, mapped to the OWASP AI Top 10, helps you assess and strengthen your organisation’s defences against AI-related security, privacy, and compliance risks.

This is the repository for the OWASP Top 10 for Large Language Model Applications. However, this project has now grown into the comprehensive OWASP GenAI Security Project - a global initiative that encompasses multiple security initiatives beyond just the Top 10 list.

March 16, 2026 - Mitigate with retrieval-augmented generation for factual grounding, confidence scoring, citation verification, and clear disclaimers about AI limitations. LLM10 — Unbounded Consumption / Denial of Service: Adversaries can abuse LLM resources ...

March 20, 2026 - Verifiability (Observability): You cannot secure what you cannot see. Log the exact prompt sent to the LLM, the exact output received, the tool selection rationale, and the parameters. Implement “Shadow Mode” testing where the agent plans actions but cannot execute them without human review until trust is established. Charity Majors recently wrote a post that nails that last point. AI engineering is not magic; it is distributed systems engineering with a highly unreliable component in the middle.