OWASP Top 10 for LLM Applications 2026
The published 2026 edition and its canonical source links. Use the edition label when mapping risks or comparing earlier assessments.
AN INDEPENDENT MAP OF AI SECURITY
Find your next
good source.●
Original research, practical guides, and trusted starting points. A smaller, more useful way into AI security.
— sources— selected readings08 topics
A question, a topic, or the source you already know.
Curated links. Original publishers.
EXPLORE THE INDEX
A little direction goes a long way.
The directory could not refresh. Your previous results are still here.
The lethal trifecta for AI agents: private data, untrusted content, and external communication
A concise practitioner framework for recognizing agent data-exfiltration risk. Useful for deciding which capabilities should be separated.
MCP Security Testing Guide
Tool-vendor recipes for testing MCP integrations, including tool poisoning and data-exfiltration scenarios. Adapt the examples to your deployment.
Prompt injection is not SQL injection (it may be worse)
Explains why conventional injection analogies can mislead defenders, then discusses constraining agent capabilities and managing residual risk.
Promptfoo red teaming documentation
Practical testing recipes and open-source tooling documentation from the tool vendor, useful for constructing repeatable application evaluations.
Microsoft AI Red Team
First-party planning guides, lessons and tooling from Microsoft’s AI Red Team, useful for scoping and running assessments.
Planning red teaming for large language models (LLMs) and their applications
Microsoft’s planning guide covers assessment scope, people and process. Useful before selecting automated attack tooling or defining evaluation goals.
Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
An early original paper demonstrating indirect prompt injection through retrieved content. Read the experimental setup and later revisions before generalizing.
AI Risk Management Framework: Generative Artificial Intelligence Profile
NIST AI 600-1 organizes generative AI risks and suggested actions, including data privacy and information security, for governance planning.
Simon Willison’s Weblog
Independent practitioner explanations and experiments on prompt injection and agent design; distinguish demonstrations from general guarantees.
Wiz Research
Cloud-security vendor research covering AI infrastructure exposures and exploit chains. Separate disclosed observations from product marketing.
UK NCSC secure AI guidance
Government guidance for secure AI development across design, deployment and operation, with practical lifecycle considerations.
NIST AI Risk Management Framework
Official risk-management publications and version updates. Useful for governance planning, rather than as a product certification.
arXiv Cryptography and Security
Find recent security preprints and original papers. A posting is not peer-review approval; inspect methods, revisions and linked artifacts.
A path we haven't mapped yet.
Try a broader topic or clear a filter.
“Newest” uses the original publication date. Undated guides remain available in curated order.
Directory revised
A USEFUL TOOL IN YOUR AGENT'S TOOLBOX
Let your agent start
with better references.
The same selected sources, with original links and clear dates.