OWASP GenAI

OWASP GenAI refers to the Open Worldwide Application Security Project's initiatives focused on securing generative AI systems and applications. This includes frameworks, guidelines, and vulnerability assessments specific to large language models and other generative technologies that help organizations identify and mitigate AI-specific security risks. For enterprise governance, OWASP GenAI provides standardized security baselines and threat models that align with broader compliance requirements and help teams evaluate vendor solutions and internal AI implementations against established security benchmarks.

1 item

StandardsGlobal2026-07-31

OWASP Updates Agentic AI Vulnerability Baseline, Tightening Compliance Expectations

OWASP GenAI released version 2.01 of its State of Agentic AI Security and Governance report, updating the recognized vulnerability landscape for autonomous AI systems. The guidance addresses prompt injection, tool abuse, and poisoned knowledge sources as primary threat vectors. Enterprise security and compliance teams should treat this release as a baseline shift that requires immediate review of agentic AI controls.

OWASP GenAI agentic AI prompt injection least privilege MCP security tool abuse knowledge source integrity governance