Docs

Appearance

Frequently asked questions about OWASP for AI ​

This page answers frequently asked questions about the OWASP GenAI Security Project. It covers two of its Top 10 documents: the OWASP Top 10 for LLM Applications and the OWASP Top 10 for Agentic Applications.

Disclaimer

This page gives general information. It is not legal advice or security advice.

What is OWASP for AI? ​

OWASP for AI here means the OWASP GenAI Security Project's Top 10 for LLM Applications and Top 10 for Agentic Applications. These are community security guidance for general information, not law, with the CC BY-SA 4.0 license.

As of October 2026, the current editions are LLM 2026 and Agentic Version 2026. Modulos maps LLM 2025 and Agentic Version 2026. See editions and scope.

The Project also publishes other information, such as the GenAI Security Crosswalk and the Agentic Threat Modelling Guide.

Should I use OWASP Top 10 for LLM or OWASP Top 10 for Agentic Applications? ​

Use the OWASP Top 10 for LLM Applications for a system that uses a large language model (LLM). If the system also operates as an agent, use the OWASP Top 10 for Agentic Applications together with the LLM Top 10. In the Agentic Top 10, agents "plan, decide, and act across multiple steps and systems".

These conditions change the decision for some systems:

  • The LLM Top 10 also includes some agent risks, for example LLM06:2025 Excessive Agency. See the scope of each edition.
  • A copilot or a system that uses Retrieval-Augmented Generation (RAG) can be in the scope of the Agentic Top 10. ASI06 (Memory & Context Poisoning) includes "RAG stores", and the first attack scenario of ASI01 uses Microsoft 365 Copilot. But a system that uses RAG is not always agentic. Make the decision from the operation and the risks of the system.
  • The two Top 10 documents are not law. The decision is a security decision. If a law applies to the system, examine that law independently.

See When to use the Agentic Top 10 and When to use each OWASP Top 10.

Is the OWASP GenAI Security Project official OWASP? ​

Yes. The citation of the OWASP Top 10 for LLM Applications names the OWASP Foundation as the publisher. The OWASP Foundation announced the launch of the Agentic Security Initiative. In the Agentic Top 10, OWASP identifies the document as "the work of the global OWASP community".

  • The two Top 10 documents are community security guidance, not law.
  • OWASP publishes each Top 10 document with the CC BY-SA 4.0 license. Use of an OWASP Top 10 does not mean that OWASP endorses the person or the use.

See OWASP for AI and Sources.