Owasp
owasp.org
Application Security
Open Source Projects & Foundations
As featured in
Claim pageClaim
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
News
OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise RL Blog
While prompt injection and data disclosure remain concerns, excessive agency climbed the list - not surprising with recent security incidents.
Read more
Report
GitHub - owasp-amass/amass: In-depth attack surface mapping and asset discovery
In-depth attack surface mapping and asset discovery - owasp-amass/amass
Read more
Report
Prompt Injection tops 2026 OWASP GenAI / LLM Top Ten vulnerabilities
For the third year in a row, prompt injection tops the OWASP GenAI / LLM Top Ten list issued today as being the most vulnerable practice to be exploited.
Read more
Report
Eclipse Foundation and OWASP Join Forces to Strengthen Open Source Security and CRA Readiness
Read more
Report
GitHub - agileAlligator/mcploitable: The "Metasploitable" of MCP - a deliberately vulnerable Model Context Protocol server for agentic-security training, mapped to the OWASP Top 10 for Agentic Applications.
The "Metasploitable" of MCP - a deliberately vulnerable Model Context Protocol server for agentic-security training, mapped to the OWASP Top 10 for Agentic Applications. - agileAlligator/mcploitable
Read more
Report
The OWASP Agentic AI Top 10: What Builders on AWS Need to Know
The OWASP Top 10 for Agentic Applications maps the biggest security threats facing autonomous AI systems. Here
Read more
Report
AgentKits - Production-Ready AI Agent Blueprints with Guardrails
How AgentAz design-time governance dimensions map to NIST AI RMF 1.0, ISO/IEC 42001:2023, and the OWASP Top 10 for Agentic Applications (ASI01-ASI10). A free reference for compliance questionnaires - with honest scope gaps marked.
Read more
Report
OWASP Dependency-Track 5.0 Is Now Generally Available OWASP Foundation
OWASP Dependency-Track 5.0 Is Now Generally Available on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
Read more
Report
The OWASP Agentic Security Initiative Top 10: A Practical Developer Guide for LangChain and CrewAI
OWASP formalized ASI01-ASI10 - the first structured vulnerability taxonomy for AI agents. What each category means in practice, with real safelabs-eval test results for every category. For LangChain and CrewAI developers.
Read more
Report
Show more news