» Tag
owasp
6 postsSecuring AI Agents: From Trust to Containment
As AI agents shift from passive models to autonomous actors, the security perimeter moves inward. A look at OWASP-aligned risks and containment strategies.
Securing MCP Servers: Four Gates From Code to Production
A leaked .env file exposed a design flaw in an MCP server. Here's a four-gate, OWASP-aligned defense strategy engineers can adopt today.
AVE: A Behavioral Vulnerability Standard for Agentic AI
AVE is a new standard classifying behavioral vulnerabilities in agentic AI, using AIVSS scoring and the bawbel-scanner reference tool for CI checks.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comOpen AI-Agent Incident Database Lists 32 Failures, Admits Its Gaps
ARE Incident Database catalogs 32 real AI agent failures mapped to OWASP ASI Top 10, with runnable repros and honestly flagged coverage gaps.
GitHub Copilot Now Catches Vulnerabilities Before You Commit
GitHub Copilot's new slash command scans uncommitted code for OWASP vulnerabilities like injection and XSS before it ever reaches your repo.
AI Code Audit: 15 Security Flaws Claude Found in Production
An LLM-based security audit uncovered 15 OWASP-classified flaws-SQL/NoSQL injection, IDOR, path traversal-each shown with vulnerable and fixed code.