OWASP Agentic Top 10 crosswalk
OWASP Top 10 for Agentic Applications 2026
In short: The OWASP Top 10 for Agentic Applications 2026 lists the most critical security risks for autonomous agents. It was published on 9 December 2025. Four register controls map to two risks named in the OWASP announcement we opened: tool misuse and rogue agents.
What does OWASP Agentic Top 10 cover?
Risk list, not a control standard. Mappings show which controls reduce which risk.
Which register controls map to OWASP Agentic Top 10?
| Control | Reference | What the text says |
|---|---|---|
| GOV-06 Per-action policy | ASI02 Tool Misuse | Agents bending legitimate tools into harmful outputs. |
| GOV-10 Tool allow-listing and hiding | ASI02 Tool Misuse | Agents bending legitimate tools into harmful outputs. |
| GOV-11 Revocation and kill switch | ASI10 Rogue Agents | Agents acting outside their intended behaviour. |
| GOV-16 Shadow agent detection | ASI10 Rogue Agents | Agents acting outside their intended behaviour. |
What did we leave out, and why?
We did not map to ASI03 or ASI04, because their names did not appear on the pages we opened.
If you can point to the official text that supports a mapping, write to the desk.
Reviewed by The Register desk