# OWASP: version 2 of its guide to securing agentic applications

> Securing Agentic Applications V2 is OWASP's builder and defender guide for single-agent and multi-agent systems.

- **Severity:** Info: Research, tools, evals or lab claims with no direct exposure. Context, not an alert.
- **Category:** Research
- **Published by:** OWASP GenAI Security Project
- **Disclosed:** 2026-11-10
- **Affects:** AI agents
- **Research by:** OWASP GenAI Security Project (OWASP)
- **Primary source:** https://genai.owasp.org/resource/securing-agentic-applications-v2/
- **Page:** https://theinjection.dev/items/owasp-securing-agentic-applications-v2/

OWASP GenAI Security Project released Securing Agentic Applications V2, a 106 page builder and defender guide covering secure architectures, identity and access control, runtime protection, supply chain security and assurance testing.

## What happened

OWASP GenAI Security Project published Securing Agentic Applications V2 on November 10, 2026, as a free PDF of 106 pages. The subtitle calls it a Builder and Defender's Guide. OWASP describes the document as practical, actionable guidance for designing, developing, deploying and securing agentic AI systems.

## How it works

Six areas structure the guidance: secure architectures, threat mitigation, identity and access controls, runtime protection, supply chain security, and assurance testing. OWASP states that the guide addresses risks in both single-agent and multi-agent environments.

## Who is affected

Developers, security architects and defenders building or operating agentic AI systems are the stated audience. OWASP does not tie the guidance to a named product, model or framework.

## What to do

Read the guide against your own agent deployment, and re-check any controls you built on version 1. The PDF downloads from the resource page without registration.

## Quick facts

- **Published:** November 10, 2026
- **Publisher:** OWASP GenAI Security Project
- **Length:** 106 pages
- **Scope:** Single-agent and multi-agent environments
- **Areas covered:** Architecture, threat mitigation, identity, runtime, supply chain, assurance
- **Audience:** Developers, security architects and defenders

## Sources

1. [OWASP Resource Page](https://genai.owasp.org/resource/securing-agentic-applications-v2/)
2. [Guide PDF](https://genai.owasp.org/download/58383/?tmstv=1794198262)