OWASP

Sources#

• Zero Trust for AI Agents

Summary#

The Open Worldwide Application Security Project — a long-standing nonprofit security community, historically known for the OWASP Top 10 web-application risks. In the agentic era it is the source of the threat taxonomy that structures Zero Trust for AI Agents, it coined the term Least Agency (extending least privilege to agents), and it maintains the AI-BOM standard for supply-chain transparency.

What OWASP contributes to agentic security#

• Agentic threat taxonomy — the framework's Part II ("Current threats to agentic systems") is organized around OWASP-identified threats: prompt injection, tool and resource hijacking, identity and access privilege abuses, memory and context poisoning, and supply chain risks.
• "Least agency" — OWASP's coinage extending least privilege to agentic applications, restricting what each agent tool can do, how often, and where. See Least Agency.
• AI-BOM — OWASP's AI Bill of Materials, an extension of their CycloneDX ML-BOM, available as a web tool. Tracks model provenance, training-dataset lineage, and fine-tuning parameters; the framework recommends wiring it alongside OpenSSF Scorecard so model and code dependencies carry the same risk signals.

Relation to other standards bodies#

In the Zero Trust lineage, OWASP sits alongside the formal government standards the framework cites — NIST (SP 800-207), the NSA (Zero Trust Implementation Guides), CISA (Zero Trust Maturity Model), and international equivalents (UK NCSC, Australia Home Affairs). OWASP supplies the application/agent-level threat vocabulary; the government bodies supply the architecture-level doctrine.

Connections#

• Zero Trust for AI Agents — the framework built on OWASP's agentic threat taxonomy
• Least Agency — OWASP coinage
• Agent Supply Chain Risk — OWASP maintains the AI-BOM used to manage it
• Agentic Prompt Injection / Memory and Context Poisoning — threats in OWASP's agentic taxonomy
• Anthropic — adopts and extends the OWASP taxonomy in its Zero Trust framework

Sources#

• Zero Trust for AI Agents — OWASP cited as the source of the agentic threat taxonomy, "least agency," and the AI-BOM