OWASP Agentic AI Top 10: Security Risks for Autonomous Agents
A technical explanation of all ten OWASP agentic application risks and the architecture, authorization, testing, and monitoring controls they require.
Cybersecurity content blog
Research Archive, Page 2.
Earlier articles on security engineering, industry standards, product claims, and technical content.
Article archive
Cybersecurity Articles, Page 2 of 3.
Each article addresses a defined search question and links claims to named sources.
OWASP API Security Top 10: Risks, Examples, and Controls for 2023
A practical guide to the OWASP API Security Top 10 2023, with control design, testing priorities, and clear distinctions between its authorization categories.
OWASP Kubernetes Top 10 2025: Cluster Risks and Security Controls
A technical guide to all ten OWASP Kubernetes risks and the workload, RBAC, secret, network, cloud, admission, and audit controls they require.
OWASP LLM Top 10 2025: Risks and Controls for AI Applications
A technical guide to all ten OWASP LLM application risks, with practical architecture, testing, authorization, data, and monitoring controls.
OWASP MCP Top 10: Risks, Controls, and Testing for MCP Servers
A technical guide to the OWASP MCP Top 10 beta, with practical controls for MCP clients, servers, tools, credentials, context, and audit records.
OWASP Mobile Top 10 2024: Risks, Testing, and Secure App Controls
A practical explanation of all ten OWASP mobile application risks and how to test Android, iOS, backend, build, privacy, and binary controls.
OWASP Non-Human Identities Top 10: Risks and Controls for 2025
A technical guide to all ten OWASP NHI risks and the inventory, ownership, credential, access, lifecycle, and monitoring controls they require.
OWASP Top 10 2025: Web Application Risks, Changes, and Controls
A current guide to all ten OWASP Top 10 2025 categories, including the new supply chain and exceptional-condition risks.
AI Agent Authorization: Tool Access, Delegation, and Least Privilege
Agents need enforceable limits on tools, data, and delegated authority. This article maps OAuth, MCP, approvals, revocation, audit, and confused deputy controls.