OWASP Top 10 for LLM Applications 2026
The published 2026 edition and its canonical source links. Use the edition label when mapping risks or comparing earlier assessments.
AN INDEPENDENT MAP OF AI SECURITY
Find your next
good source.●
Original research, practical guides, and trusted starting points. A smaller, more useful way into AI security.
— sources— selected readings08 topics
A question, a topic, or the source you already know.
Curated links. Original publishers.
EXPLORE THE INDEX
A little direction goes a long way.
The directory could not refresh. Your previous results are still here.
Trail of Bits AI and machine learning research
Original vulnerability research and audit engineering from a commercial security firm, with technical examples and project links.
GitHub Advisory Database
Search package security advisories and inspect identifiers, affected ranges and maintainer references; coverage extends beyond AI software.
OSV — Open Source Vulnerabilities
Structured open-source vulnerability records and package queries. Check ecosystem and version matching before applying a result.
AI Risk Management Framework: Generative Artificial Intelligence Profile
NIST AI 600-1 organizes generative AI risks and suggested actions, including data privacy and information security, for governance planning.
OSV API Quickstart
Official examples for querying package versions or commit hashes. Useful when an agent needs structured vulnerability evidence rather than a web summary.
Wiz Research
Cloud-security vendor research covering AI infrastructure exposures and exploit chains. Separate disclosed observations from product marketing.
UK NCSC secure AI guidance
Government guidance for secure AI development across design, deployment and operation, with practical lifecycle considerations.
NIST AI Risk Management Framework
Official risk-management publications and version updates. Useful for governance planning, rather than as a product certification.
REST API endpoints for global security advisories
Official API documentation for retrieving and filtering global advisories, with affected-package data and source references.
Audit shows that safetensors is safe and ready to become the default
The project sponsor explains serialization risks and links the commissioned audit. Audit results apply to the reviewed scope and version.
Hugging Face Hub security documentation
Platform-maintainer documentation on model artifact scanning and repository security; useful when evaluating downloaded AI assets.
NVIDIA Product Security
NVIDIA’s official security bulletin repository provides maintainer notices and machine-readable records for its products, including AI infrastructure.
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
Wiz Research article on an autonomous red-agent exercise involving a GitHub Actions injection in a Copilot-assisted pull request and an assessment of access to internal Jira.
A path we haven't mapped yet.
Try a broader topic or clear a filter.
“Newest” uses the original publication date. Undated guides remain available in curated order.
Directory revised
A USEFUL TOOL IN YOUR AGENT'S TOOLBOX
Let your agent start
with better references.
The same selected sources, with original links and clear dates.