OWASP: version 2 of its guide to securing agentic applications
Securing Agentic Applications V2 is OWASP's builder and defender guide for single-agent and multi-agent systems.
· OWASP GenAI Security Project · Research by OWASP GenAI Security Project (OWASP)
OWASP GenAI Security Project released Securing Agentic Applications V2, a 106 page builder and defender guide covering secure architectures, identity and access control, runtime protection, supply chain security and assurance testing.
01What happened
OWASP GenAI Security Project published Securing Agentic Applications V2 on November 10, 2026, as a free PDF of 106 pages. The subtitle calls it a Builder and Defender's Guide. OWASP describes the document as practical, actionable guidance for designing, developing, deploying and securing agentic AI systems.
02How it works
Six areas structure the guidance: secure architectures, threat mitigation, identity and access controls, runtime protection, supply chain security, and assurance testing. OWASP states that the guide addresses risks in both single-agent and multi-agent environments.
03Who is affected
Developers, security architects and defenders building or operating agentic AI systems are the stated audience. OWASP does not tie the guidance to a named product, model or framework.
04What to do
Read the guide against your own agent deployment, and re-check any controls you built on version 1. The PDF downloads from the resource page without registration.
Sources 2 links, all fetched
- 1genai.owasp.orgOWASP Resource Page
- 2genai.owasp.orgGuide PDF